Recommendation: The Director of OMB should comply with its statutory requirement to issue implementation guidance to agencies to develop and maintain comprehensive data inventories. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of OMB should comply with the statutory requirement to electronically publish a report on agencies' performance and compliance with the OPEN Government Data Act. (Recommendation 2)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of OMB, in collaboration with the Administrator of GSA, should establish policy to ensure the routine identification and correction of errors in electronically published performance information. (Recommendation 3)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Assistant to the President for National Security Affairs, in coordination with relevant stakeholders from NSC and NEC, should ensure that the plan to implement the 5G national strategy fully addresses all elements of our six desirable characteristics of a national strategy.

Agency: Executive Office of the President: Office of the Assistant to the President for National Security Affairs
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Agriculture should ensure that the agency fully implements the category management activity to reduce unaligned IT spending, by performing an analysis of alternatives to justify the agency's unaligned IT contracts. (Recommendation 1)

Agency: Department of Agriculture
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Agriculture should ensure that the agency fully implements the category management activity to develop and implement vendor management strategies, by implementing the strategies it had developed. (Recommendation 2)

Agency: Department of Agriculture
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Agriculture should ensure that the agency fully implements the category management activity to share prices paid, terms, and conditions for purchased IT goods and services. (Recommendation 3)

Agency: Department of Agriculture
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Agriculture should ensure that the agency finishes implementing its process to analyze IT contract data. (Recommendation 4)

Agency: Department of Agriculture
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Agriculture should ensure that the agency develops and implements strategies to address duplication identified through the use of spend analyses. (Recommendation 5)

Agency: Department of Agriculture
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should ensure that the agency fully implements the category management activity to reduce unaligned IT spending. (Recommendation 6)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should ensure that the agency documents its annual spend analyses used to identify opportunities to reduce IT contract duplication. (Recommendation 7)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Health and Human Services should ensure that the agency uses a spend analysis on a regular basis to identify IT contract duplication. (Recommendation 8)

Agency: Department of Health and Human Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Attorney General should ensure that the Department of Justice fully implements the category management activity to reduce unaligned IT spending, by performing an analysis of alternatives to justify the agency's unaligned IT contracts. (Recommendation 9)

Agency: Department of Justice
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Attorney General should ensure that the Department of Justice fully implements the category management activity to share prices paid, terms and conditions for purchased IT goods and services. (Recommendation 10)

Agency: Department of Justice
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Attorney General should ensure that the Department of Justice fully implements the category management activity to engage the workforce in training regarding category management principles and practices, by tracking its workforce's attendance in the training. (Recommendation 11)

Agency: Department of Justice
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Attorney General should ensure that the Department of Justice uses a spend analysis to identify opportunities to reduce IT contract duplication. (Recommendation 12)

Agency: Department of Justice
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Attorney General should ensure that the Department of Justice develops and implements strategies to address duplication identified through the use of spend analyses. (Recommendation 13)

Agency: Department of Justice
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of State should ensure that the agency fully implements the category management activity to develop and implement vendor relationship management strategies, by executing its vendor management plan. (Recommendation 14)

Agency: Department of State
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency fully implements the category management activity to develop processes and policies for implementing the agency's category management efforts. (Recommendation 15)

Agency: Department of Veterans Affairs
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency fully implements the category management activity to reduce unaligned IT spending, by performing an analysis of alternatives to justify the agency's unaligned IT contracts. (Recommendation 16)

Agency: Department of Veterans Affairs
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency fully implements the category management activity to develop and implement vendor relationship management strategies. (Recommendation 17)

Agency: Department of Veterans Affairs
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency fully implements the category management activity to share prices paid, terms and conditions for purchased IT goods and services. (Recommendation 18)

Agency: Department of Veterans Affairs
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency uses a spend analysis to identify opportunities to reduce IT contract duplication. (Recommendation 19)

Agency: Department of Veterans Affairs
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency develops and implements strategies to address duplication identified through the use of spend analyses. (Recommendation 20)

Agency: Department of Veterans Affairs
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of State should ensure that State involves federal agencies that contribute to cyber diplomacy to obtain their views and identify any risks, such as unnecessary fragmentation, overlap, and duplication of these efforts, as it implements its plan to establish the Bureau of Cyberspace Security and Emerging Technologies.

Agency: Department of State
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Chairman of the National Security Council, or his designee, should work with relevant federal entities to update strategy documents related to the nation's cybersecurity to better reflect desirable characteristics of a national strategy, to include:

• an assessment of cyber-related risk, based on an analysis of the threats to, and vulnerabilities of, critical assets and operations;

• measures of performance and formal mechanism to track progress of the execution of activities; and

• an analysis of the cost and resources needed to implement the National Cyber Strategy. (Recommendation 1)

Agency: Executive Office of the President: National Security Council
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: Congress should consider legislation to designate a leadership position in the White House with the commensurate authority—for example, over budgets and resources—to implement and encourage action in support of the nation's cyber critical infrastructure, including the implementation of the National Cyber Strategy. (Matter for Consideration 1)

Agency: Congress
Status: Open

Comments: When we determine what steps the Congress has taken, we will provide updated information.

Recommendation: The Secretary of Health and Human Services in coordination with the Administrator of the Federal Emergency Management Agency—who head agencies leading the COVID-19 response through the Unified Coordination Group—should immediately document roles and responsibilities for supply chain management functions transitioning to the Department of Health and Human Services, including continued support from other federal partners, to ensure sufficient resources exist to sustain and make the necessary progress in stabilizing the supply chain, and address emergent supply issues for the duration of the COVID-19 pandemic. (Recommendation 1)

Agency: Department of Health and Human Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Health and Human Services in coordination with the Administrator of the Federal Emergency Management Agency—who head agencies leading the COVID-19 response through the Unified Coordination Group—should further develop and communicate to stakeholders plans outlining specific actions the federal government will take to help mitigate remaining medical supply gaps necessary to respond to the remainder of the pandemic, including through the use of Defense Production Act authorities. (Recommendation 2)

Agency: Department of Health and Human Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Health and Human Services—who heads one of the agencies leading the COVID-19 response through the Unified Coordination Group—consistent with their roles and responsibilities, should work with relevant federal, state, territorial, and tribal stakeholders to devise interim solutions, such as systems and guidance and dissemination of best practices, to help states enhance their ability to track the status of supply requests and plan for supply needs for the remainder of the COVID-19 pandemic response. (Recommendation 3)

Agency: Department of Health and Human Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of the Federal Emergency Management Agency—who heads one of the agencies leading the COVID-19 response through the Unified Coordination Group—consistent with their roles and responsibilities, should work with relevant federal, state, territorial, and tribal stakeholders to devise interim solutions, such as systems and guidance and dissemination of best practices, to help states enhance their ability to track the status of supply requests and plan for supply needs for the remainder of the COVID-19 pandemic response. (Recommendation 4)

Agency: Department of Homeland Security: Directorate of Emergency Preparedness and Response: Federal Emergency Management Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Health and Human Services, with support from the Secretary of Defense, should establish a time frame for documenting and sharing a national plan for distributing and administering COVID-19 vaccine, and in developing such a plan ensure that it is consistent with best practices for project planning and scheduling and outlines an approach for how efforts will be coordinated across federal agencies and nonfederal entities. (Recommendation 5)

Agency: Department of Health and Human Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: As the Centers for Disease Control and Prevention (CDC) implements its COVID-19 Response Health Equity Strategy, the Director of the Centers for Disease Control and Prevention should determine whether having the authority to require states and jurisdictions to report race and ethnicity information for COVID-19 cases, hospitalizations, and deaths is necessary for ensuring more complete data, and if so, seek such authority from Congress. (Recommendation 6)

Agency: Department of Health and Human Services: Public Health Service: Centers for Disease Control and Prevention
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: As CDC implements its COVID-19 Response Health Equity Strategy, the Director of the Centers for Disease Control and Prevention should involve key stakeholders to help ensure the complete and consistent collection of demographic data. (Recommendation 7)

Agency: Department of Health and Human Services: Public Health Service: Centers for Disease Control and Prevention
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: As CDC implements its COVID-19 Response Health Equity Strategy, the Director of the Centers for Disease Control and Prevention should take steps to help ensure CDC's ability to comprehensively assess the long-term health outcomes of persons with COVID-19, including by race and ethnicity. (Recommendation 8)

Agency: Department of Health and Human Services: Public Health Service: Centers for Disease Control and Prevention
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury, in coordination with the Commissioner of Internal Revenue, should update and refine the estimate of eligible recipients who have yet to file for an economic impact payment to help target outreach and communications efforts. (Recommendation 9)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury, in coordination with the Commissioner of Internal Revenue, should make estimates of eligible recipients who have yet to file for an economic impact payment, and other relevant information, available to outreach partners to raise awareness about how and when to file for economic impact payments. (Recommendation 10)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the Office of Management and Budget, in consultation with the Department of the Treasury, should issue the addendum to the 2020 Compliance Supplement as soon as possible to provide the necessary audit guidance. (Recommendation 11)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the Centers for Disease Control and Prevention should ensure that, as it makes updates to its federal guidance related to reassessing schools' operating status, the guidance is cogent, clear, and internally consistent. (Recommendation 12)

Agency: Department of Health and Human Services: Public Health Service: Centers for Disease Control and Prevention
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Homeland Security, in coordination with the Secretary of Defense, should (1) revise the criteria in the 2019 National Interest Action code memorandum of agreement to clearly identify steps they will take to obtain input from key federal agencies prior to extending or closing a National Interest Action code, (2) establish timelines for evaluating the need to extend a National Interest Action code, and (3) define what constitutes a consistent decrease in contract actions and routine contract activity to ensure the criteria for extending or closing the National Interest Action code reflect government-wide needs for tracking contract actions in longer term emergencies, such as a pandemic. (Recommendation 13)

Agency: Department of Homeland Security
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense, in coordination with the Secretary of Homeland Security, should (1) revise the criteria in the 2019 National Interest Action code memorandum of agreement to clearly identify steps they will take to obtain input from key federal agencies prior to extending or closing a National Interest Action code, (2) establish timelines for evaluating the need to extend a National Interest Action code, and (3) define what constitutes a consistent decrease in contract actions and routine contract activity to ensure the criteria for extending or closing the National Interest Action code reflect government-wide needs for tracking contract actions in longer term emergencies, such as a pandemic. (Recommendation 14)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Health and Human Services, in consultation with the Centers for Medicare & Medicaid Services and CDC, should develop a strategy to capture more complete data on confirmed COVID-19 cases and deaths in nursing homes retroactively back to January 1, 2020, and to clarify the extent to which nursing homes have reported data before May 8, 2020. To the extent feasible, this strategy to capture more complete data should incorporate information nursing homes previously reported to CDC or to state or local public health offices. (Recommendation 15)

Agency: Department of Health and Human Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: Based on the imminent cybersecurity threats, the Secretary of Health and Human Services should expedite implementation of our prior recommendations regarding cybersecurity weaknesses at its component agencies. (Recommendation 16)

Agency: Department of Health and Human Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Commerce, in consultation with the department-level Executive Resources Board and Office of Executive Resources, should fully implement policy and guidance in development that require the bureaus to maintain career SES reassignment-related documentation in the SES member's Official Personnel Folder, and to provide those documents to the Office of Executive Resources for review and approval before making career SES reassignments. (Recommendation 1)

Agency: Department of Commerce
Status: Open

Comments: In its comments on a draft of this report, Commerce concurred with the recommendation and indicated it will take steps to implement the recommendation. We will continue to monitor Commerce's progress.

Recommendation: The Secretary of Housing and Urban Development should establish a date to finalize its draft standard operating procedures for conducting career SES reassignments, and ensure that the final procedures include (1) obtaining a written moratorium waiver from the career SES member before making the reassignment during the new, noncareer supervisor moratorium, and (2) retaining the waiver in the member's Official Personnel Folder. (Recommendation 2)

Agency: Department of Housing and Urban Development
Status: Open

Comments: In its comments on the draft of the report, HUD said it finalized standard operating procedures for making career SES reassignments, and thus believes it has addressed our recommendation. We will follow up with the department to assess whether its actions fully address the recommendation.

Recommendation: The Acting Director of the Office of Personnel Management should use OPM's oversight authority to monitor career SES reassignments to ensure that federal agencies meet requirements contained in statute or regulation, and follow OPM's related guidance. In situations where OPM finds that an agency has taken a career SES reassignment action contrary to these requirements, it should use its authority to require the agency to take corrective action, as appropriate. (Recommendation 4)

Agency: Office of Personnel Management
Status: Open

Comments: OPM did not concur with our recommendation. In its comment on a draft of the report, OPM said it relies on federal agencies to comply with provisions governing SES reassignments. OPM further stated that it has chosen not to make reassignments a focus of its enforcement efforts, in light of scarce resources and other mandates OPM is required to meet. However, for reasons discussed in the report, we maintain that OPM should use its oversight authority to ensure agencies' reassignments of SES staff are consistent with requirements. We will continue to monitor OPM's progress.

Recommendation: The Commissioner of the FDA should ensure that PAC renews its charter. (Recommendation 1)

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should require ETAAC and IRSAC to make decisions on proposed recommendations to IRS during open meetings. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should require ETAAC and IRSAC to compile meeting minutes and make them publicly available. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the Census Bureau should require CSAC to compile meeting minutes and make them publicly available. (Recommendation 4)

Agency: Department of Commerce: Bureau of the Census
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Treasury should require FACA committees under Treasury's purview to provide access to meeting agendas and supporting documents on the committees' websites. (Recommendation 5)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of NIH should establish and implement a policy requiring all FACA committees under NIH's jurisdiction to post meeting minutes online. (Recommendation 6)

Agency: Department of Health and Human Services: Public Health Service: National Institutes of Health
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of GSA should encourage FACA committees to make information on agencies' responses to and implementation of specific recommendations publicly available online, unless exempted from public disclosure under the Freedom of Information Act. (Recommendation 7)

Agency: General Services Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of GSA should require agencies to develop and implement written policies or procedures to identify, calculate, and fully document FACA committee costs, and ensure agency staff enter accurate and complete cost data into the FACA database. (Recommendation 8)

Agency: General Services Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of GSA should direct the Committee Management Secretariat to require FACA committees to specify the exact date when they last updated cost data in the FACA database. This could be completed in a field in the database under the "Committee Cost" section or in another relevant data field. (Recommendation 9)

Agency: General Services Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: Congress should consider amending FACA to require agencies and advisory committees to make available online documents FACA already requires to be made available for public inspection and copying. (Matter for Consideration 1)

Agency: Congress
Status: Open

Comments: When we determine what steps the Congress has taken, we will provide updated information.

Recommendation: The Council should further clarify and document its roles and responsibilities with regard to USICH matters requiring the Council's approval, the role of the Council Chair, and actions within the Executive Director's delegated authority. (Recommendation 1)

Agency: United States Interagency Council on Homelessness
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of OMB should take steps to ensure that federal agencies implement its guidance on agency adherence to E.O. 13132 requirements, particularly related to designating a federalism official. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: Congress should consider legislation to require each CFO at a CFO Act agency to oversee and provide leadership for all of the responsibilities necessary to effectively carry out federal financial management activities, including the formulation and financial execution of the budget, planning and performance, risk management, internal control, financial systems, and accounting. (Matter for Consideration 1)

Agency: Congress
Status: Open

Comments: A bill (S. 3287) introduced in February 2020 proposed changes to the CFO Act. Among the proposed changes was language to clarify the duties and responsibilities of the CFO, including the formulation and financial execution of the budget, planning and performance, risk management, internal control, financial systems, and accounting. We will continue to monitor the status of this bill.

Recommendation: Congress should consider legislation to require deputy CFOs in CFO Act agencies to have defined responsibilities consistent with the breadth of those of the agency CFOs. (Matter for Consideration 2)

Agency: Congress
Status: Open

Comments: A bill (S. 3287) introduced in February 2020 proposed changes to the CFO Act. Among the proposed changes was language to specify that the deputy CFO shall assist the agency CFO in the performance of each of the duties of the agency CFO. We will continue to monitor the status of this bill.

Recommendation: Congress should consider legislation to require the Director of OMB to prepare and submit to the appropriate committees of Congress a government-wide 4-year financial management plan (with timing to match the GPRA reporting requirements) and an annual financial management status report.

a. The plan should include actions for improving financial management systems, strengthening the federal financial management workforce, and better linking performance and cost information for decision-making.

b. The plan should be developed in consultation with the CFO Council, the Chief Information Officers Council, the Chief Data Officer Council, the Chief Acquisition Officers Council, CIGIE, GAO, and other appropriate financial management experts. (Matter for Consideration 3)

Agency: Congress
Status: Open

Comments: A bill (S. 3287) introduced in February 2020 proposed changes to the CFO Act. Among the proposed changes was language that calls for a government-wide 4-year financial management plan and an annual financial management status report. The plan is to address actions for improving financial management systems, strengthening the federal financial management workforce, and better linking performance and cost information for decision-making. The plan is to be developed in consultation with the CFO Council, the Chief Information Officers Council, the Chief Data Officer Council, the Chief Acquisition Officers Council, CIGIE, GAO, and other appropriate financial management experts. We will continue to monitor the status of this bill.

Recommendation: Congress should consider legislation to require each CFO at a CFO Act agency, in consultation with financial management and other appropriate experts, to prepare an agency plan to implement the 4-year government-wide financial management plan prepared by OMB. (Matter for Consideration 4)

Agency: Congress
Status: Open

Comments: A bill (S. 3287) introduced in February 2020 proposed changes to the CFO Act. Among the proposed changes was language that calls for the CFO of each CFO Act agency to prepare, in consultation with financial management and other appropriate experts, an agency plan to implement the 4-year financial management plan prepared by the Director of the Office of Management and Budget and to achieve and sustain effective financial management in the agency. We will continue to monitor the status of this bill.

Recommendation: Congress should consider legislation to require the Director of OMB to prepare comprehensive financial management performance-based metrics and use these metrics to evaluate the financial management performance of executive agencies. The metrics should be included in the government-wide and agency-level financial management plans, and agencies' performance against the metrics should be reported in the annual financial management status reports. (Matter for Consideration 5)

Agency: Congress
Status: Open

Comments: A bill (S. 3287) introduced in February 2020 proposed changes to the CFO Act. Among the proposed changes was language that calls for the Director of OMB to prepare comprehensive financial management performance-based metrics, which are to be used to evaluate the financial management performance of executive agencies. These metrics are to be included in the government-wide and agency-level financial management plans, and agencies' performance against the metrics are to be reported in annual financial management status reports. We will continue to monitor the status of this bill.

Recommendation: Congress should consider legislation to require the head of each executive agency to identify, and if necessary develop, the key financial management information, in addition to financial statements, needed for effective financial management and decision-making. (Matter for Consideration 6)

Agency: Congress
Status: Open

Comments: A bill (S. 3287) introduced in February 2020 proposed changes to the CFO Act. Among the proposed changes was language that calls for the head of each CFO Act agency to identify key financial management information needed for effective financial management decision-making. We will continue to monitor the status of this bill.

Recommendation: Congress should consider legislation to require the head of each executive agency to annually assess and separately report their conclusion on the effectiveness of internal controls of the agency over financial reporting and other key financial management information. (Matter for Consideration 7)

Agency: Congress
Status: Open

Comments: A bill (S. 3287) introduced in February 2020 proposed changes to the CFO Act. Among the proposed changes was language that calls for the head of each CFO Act agency to annually assess and separately report on the effectiveness of internal controls of the agency over financial reporting and other key financial management information. We will continue to monitor the status of this bill.

Recommendation: Congress should consider legislation to require auditors, as part of each financial statement audit of an executive agency, to test and report on internal control over financial reporting and other key financial management information. (Matter for Consideration 8)

Agency: Congress
Status: Open

Comments: A bill (S. 3287) introduced in February 2020 proposed changes to the CFO Act. Among the proposed changes was language that calls for the financial statement auditors of each CFO Act agency to report on their evaluation of internal control over financial reporting and other key financial management information. We will continue to monitor the status of this bill.

Recommendation: We recommend that the Attorney General ensure that additional guidance is provided to federal agencies to clarify Fix NICS Act certification requirements for record submissions and reporting. (Recommendation 1)

Agency: Department of Justice
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: SBA's Associate Administrator for Government Contracting and Business Development should develop a central repository for PCRs to store the supporting documentation for the data they report on their activities. (Recommendation 1)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: SBA's Associate Administrator for Government Contracting and Business Development should ensure that SBA submits required reports to Congress on PCRs' assignments and activities. (Recommendation 2)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Acting Commissioner of CBP should better communicate to stakeholders the types of information stakeholders could collect and submit to CBP to help the agency initiate and investigate forced labor cases related to seafood and, as appropriate, other goods. (Recommendation 1)

Agency: Department of Homeland Security: United States Customs and Border Protection
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Office of the Chief Financial Officer should require payment reporting sites to document their procedures for identifying, tracking, and reporting improper payments to ensure they provide consistent and comparable information about their improper payments over time. (Recommendation 1)

Agency: Department of Energy
Status: Open

Comments: DOE agreed with the recommendation and said that it plans to clarify and adjust its current and future guidance to its payment reporting sites to require that the sites (1) develop and maintain procedures to support implementation of its payment integrity requirements for identifying, tracking, and reporting improper payments, and (2) require payment reporting sites to certify that the procedures have been developed and implemented. We will monitor and report on DOE's progress in implementing these planned actions.

Recommendation: The Office of the Chief Financial Officer should develop a monitoring process to ensure that payment reporting sites document and implement procedures that will enable them to correctly identify and report improper payments to the OCFO. (Recommendation 2)

Agency: Department of Energy
Status: Open

Comments: DOE agreed with the recommendation and said that it will (1) take measures to strengthen and enhance the existing payment integrity monitoring and quality assurance program by conducting period payment reporting site visits and (2) establish a payment integrity working group to identify best practices for incorporation into DOE processes. We will monitor and report on DOE's progress in implementing these planned actions.

Recommendation: The Office of the Chief Financial Officer should require payment reporting sites to document policies for tracking questioned costs to resolution. (Recommendation 3)

Agency: Department of Energy
Status: Open

Comments: DOE agreed with the recommendation and said they plan to develop and implement processes and procedures for tracking questioned costs to resolution. We will monitor and report on DOE's progress in implementing these planned actions.

Recommendation: The Office of the Chief Financial Officer should track information on the year the payment occurred for all improper payments, regardless of when they are identified, and determine and disclose in DOE's AFR whether the department's total annual improper payments exceeded $100 million in any given year. (Recommendation 4)

Agency: Department of Energy
Status: Open

Comments: DOE agreed with the recommendation and said it will conduct annual look-back analyses to the extent possible to determine if prior year reporting exceeded the $100 million threshold, and therefore could be subject to additional reporting requirements. We will monitor and report on DOE's progress in implementing these planned actions.

Recommendation: The Office of the Chief Financial Officer should clarify guidance to (1) define the factors for assessing adequacy of payment reporting sites' justifications that conducting recapture audits would not be cost-effective, and (2) require that the Office of the Chief Financial Officer review the sufficiency of these justifications against the criteria defined. (Recommendation 5)

Agency: Department of Energy
Status: Open

Comments: DOE agreed with the recommendation and said it will revise and enhance procedures defining the OCFO quality assurance process to (1) define the criteria for assessing the adequacy of payment reporting sites' justifications, and (2) review the payment reporting sites' justifications against the criteria defined. We will monitor and report on DOE's progress in implementing these planned actions.

Recommendation: The Office of the Chief Financial Officer should evaluate whether payment reporting sites could identify enough additional improper payments through payment recapture audits to make those audits cost-effective, such as by performing audits at selected sites. (Recommendation 6)

Agency: Department of Energy
Status: Open

Comments: DOE disagreed with the recommendation, stating in its comments that it has an ongoing Fraud Risk Management Working Group and that officials have developed a Fraud Risk Management and Data Analytics Implementation Plan to strengthen DOE's capability to prevent, identify, and recover improper payments and fraud. However, DOE's plan is still in draft form and, according to DOE's technical comments, they will not begin using data analytics until fiscal year 2021. In addition, DOE said that existing payment recapture activities to identify and recover improper payments are sufficient. However, as we discuss in the report, DOE determined that it does not need to conduct payment recapture audits based on justifications submitted by the reporting sites. We continue to believe that by evaluating whether it could identify enough additional improper payments to make payment recapture audits cost-effective, such as by performing audits at a limited number of sites, DOE would have an opportunity to identify and recover additional improper payments or have better information to justify that payment recapture audits are not cost-effective. We plan to monitor DOE actions related to this recommendation.

Recommendation: The Office of the Chief Financial Officer should revise DOE's department-level process for conducting improper payment risk assessments to include (1) developing and documenting the rationale for the variable scale used to score risk factors and weighting of the payment reporting sites; and (2) documenting DOE's consideration of the inherent risk associated with the lag in identifying certain improper payments subsequent to the fiscal year they occurred to ensure that the process results in a reliable assessment of whether the department is susceptible to significant improper payments. (Recommendation 7)

Agency: Department of Energy
Status: Open

Comments: DOE did not agree with the recommendation to develop and document the rationale for the scale used to score risk factors and weighting of payment sites, stating that its risk assessment evaluates the volume and dollar amount of payments by payment category, payments subject to manual controls, and fluctuations in volume and dollar amounts. However, we are recommending that the OCFO document the weighting of all its risk factors, including its decision to consider as equal the risks identified by all sites-regardless of the dollar amount of outlays. We continue to believe that, because DOE did not properly document how it developed and considered risk factors during its fiscal year 2018 risk assessment, it cannot ensure that the process produces a reliable assessment of whether DOE is susceptible to significant improper payments. Regarding the consideration of inherent risk, DOE said that the Payment Integrity Risk Assessment directs payment reporting sites to consider inherent risk as part of DOE's Internal Control Program. However, even if none of the sites identifies the known lag in identifying improper payments as a risk, based on our review of DOE's Agency Financial Reports, this lag is a risk to DOE as a whole. Therefore, we continue to believe that DOE should document in its risk assessment process its consideration of the known lag in identifying improper payments. We plan to monitor DOE actions related to this recommendation.

Recommendation: The Office of the Chief Financial Officer should revise DOE's department-level policies and procedures for reviewing risk assessments submitted by payment reporting sites to require a review and approval of the documentation supporting these assessments to help ensure the accuracy of the sites' assessments. (Recommendation 8)

Agency: Department of Energy
Status: Open

Comments: DOE did not agree with the recommendation, stating that sufficient processes are in place for ensuring the accuracy of payment reporting sites' risk assessments. DOE also stated that OCFO's Payment Integrity Guidance instructs payment reporting sites to maintain detailed information supporting risk assessments. However, as we discuss in the report, 5 of the 10 sites we reviewed did not provide sufficient explanation or documentation supporting their ratings for several of the risk factors. We continue to believe that by developing, documenting, and implementing policies and procedures to require the OCFO to review documentation supporting payment site risk assessments, DOE would enhance its ability to adequately monitor its decentralized improper payment risk assessment process and help ensure that individual payment reporting sites accurately score their risk factors, leading DOE to obtain a more accurate and reliable assessment of its overall risk of susceptibility to improper payments. We plan to monitor DOE actions related to this recommendation.

Recommendation: The Office of the Chief Financial Officer should revise DOE's department-level policies and procedures for conducting improper payment risk assessments to define the process for overriding a payment reporting site's risk determination, when appropriate. (Recommendation 9)

Agency: Department of Energy
Status: Open

Comments: DOE agreed with the recommendation and said that itwill clarify the quality assurance process for the payment reporting sites' ratings; however, DOE will not override the individual payment sites' risk determinations. Instead, DOE plans to work as needed with payment reporting site officials to determine the appropriate risk ratings. We will monitor and report on DOE's progress in implementing these actions.

Recommendation: The Director of OPM should routinely track and report retention data for employees with disabilities and make such data available to federal agencies, including EEOC, through a centralized web portal—such as MAX.gov. For example, OPM could track and report such data by General Schedule level pay groupings, which could help pinpoint root causes that contribute to retention rates, inform assessments of government-wide progress on employee retention, and identify needed improvements. (Recommendation 1)

Agency: Office of Personnel Management
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Attorney General of the United States should develop and implement policies and procedures for assessing the impact of training provided to agency hiring managers and human resources staff on Schedule A hiring authority. This includes assessing the impact of its training on agency performance goals related to increased hiring of individuals with disabilities and targeted disabilities. (Recommendation 2)

Agency: Department of Justice
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Attorney General of the United States should develop and implement policies and procedures for obtaining employee feedback about the agency's reasonable accommodations efforts and use such information to evaluate the ongoing effectiveness of the program. This may include identifying any effects on employee retention, identifying potential risks, and determining any improvements that may be warranted. (Recommendation 3)

Agency: Department of Justice
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of SBA should develop and implement policies and procedures for assessing and tracking the impact of training provided to agency hiring managers and human resources staff on Schedule A hiring authority. This includes assessing the impact of its training on agency performance goals related to increased hiring of individuals with disabilities and targeted disabilities. (Recommendation 4)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of SBA should develop and implement policies and procedures for obtaining employee feedback about the agency's reasonable accommodations efforts and use such information to evaluate the ongoing effectiveness of the program. This may include identifying any effects on employee retention, identifying potential risks, and determining any improvements that may be warranted. (Recommendation 5)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of SSA should develop and implement policies and procedures for assessing and tracking the impact of training provided to agency hiring managers and human resources staff on Schedule A hiring authority. This includes assessing the impact of its training on agency performance goals related to increased hiring of individuals with disabilities and targeted disabilities. (Recommendation 6)

Agency: Social Security Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should direct the DOD CIO to complete a department-wide inventory of existing IP-compliant devices and technologies to help with planning efforts and requirements development for the transition to IPv6. (Recommendation 1)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should direct the DOD CIO to develop a cost estimate as described in OMB memorandum M-05-22 for the department's transition to IPv6. (Recommendation 2)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should direct the DOD CIO to develop a risk analysis as described in OMB memorandum M-05-22 for the department's transition to IPv6. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of OMB should ensure that CMS, FBI, IRS, and SSA are collaborating on their cybersecurity requirements pertaining to state agencies to the greatest extent possible and direct further coordination where needed. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of OMB should take steps to ensure that CMS, FBI, IRS, and SSA coordinate, where feasible, on assessments of state agencies' cybersecurity, which may include steps such as leveraging other agencies' security assessments or conducting assessments jointly. (Recommendation 2)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of CMS should, in collaboration with OMB, solicit input from FBI, IRS, SSA, and state agency stakeholders on revisions to its security policy to ensure that cybersecurity requirements for state agencies are consistent with other federal agencies and NIST guidance to the greatest extent possible and document CMS's rationale for maintaining any requirements variances.(Recommendation 3)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of CMS should revise its assessment policies to maximize coordination with other federal agencies to the greatest extent practicable. (Recommendation 4)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The FBI Director should, in collaboration with OMB, solicit input from CMS, IRS, SSA, and state agency stakeholders on revisions to its security policy to ensure that cybersecurity requirements for state agencies are consistent with other federal agencies and NIST guidance to the greatest extent possible. (Recommendation 5)

Agency: Department of Justice: Federal Bureau of Investigation
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The FBI Director should fully develop policies for coordinating with state agencies on the use of prior findings from relevant cybersecurity assessments conducted by other organizations. (Recommendation 6)

Agency: Department of Justice: Federal Bureau of Investigation
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The FBI Director should revise its assessment policies to maximize coordination with other federal agencies to the greatest extent practicable. (Recommendation 7)

Agency: Department of Justice: Federal Bureau of Investigation
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The IRS Commissioner should, in collaboration with OMB, solicit input from CMS, FBI, SSA, and state agency stakeholders on revisions to its security policy to ensure that cybersecurity requirements for state agencies are consistent with other federal agencies and NIST guidance to the greatest extent possible. (Recommendation 8)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The IRS Commissioner should revise its assessment policies to maximize coordination with other federal agencies to the greatest extent practicable. (Recommendation 9)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of SSA should, in collaboration with OMB, solicit input from CMS, FBI, IRS, and state agency stakeholders on revisions to its security policy to ensure that cybersecurity requirements for state agencies are consistent with other federal agencies and NIST guidance to the greatest extent possible and document the SSA's rationale for maintaining any requirements variances. (Recommendation 10)

Agency: Social Security Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of SSA should fully develop policies for coordinating with state agencies on the use of prior findings from relevant cybersecurity assessments conducted by other organizations. (Recommendation 11)

Agency: Social Security Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of SSA should revise its assessment policies to maximize coordination with other federal agencies to the greatest extent practicable. (Recommendation 12)

Agency: Social Security Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of HHS, in consultation with the Council on Economic Mobility, should make information that would assist state and local entities in developing and implementing two-generation poverty reduction approaches readily available across federal programs and offices. (Recommendation 1)

Agency: Department of Health and Human Services
Status: Open

Comments: HHS agreed with this recommendation. The agency stated that through its coordination of the Council on Economic Mobility it will promote poverty reduction approaches that aim to provide more integrated, person-centered service delivery. It will also work to identify opportunities for collaboration, promising practices, and successful models that promote economic mobility and will develop strategies for promoting them, such as through technical assistance. We will monitor the progress of these efforts.

Recommendation: The Director of OMB, working with DHS, should develop a government-wide communications strategy to inform and, as appropriate, involve Congress, employees, and other stakeholders in implementation of the reform proposal to solve the cybersecurity workforce shortage. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget: Office of the Director
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of OMB, working with DHS, should establish a dedicated government-wide leadership team with responsibility for implementing the reform proposal to solve the cybersecurity workforce shortage. (Recommendation 2)

Agency: Executive Office of the President: Office of Management and Budget: Office of the Director
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of OMB, working with DHS, should develop a government-wide implementation plan with goals, timelines, key milestones, and deliverables to track and communicate implementation progress of the reform proposal to solve the cybersecurity workforce shortage. (Recommendation 3)

Agency: Executive Office of the President: Office of Management and Budget: Office of the Director
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of OMB, working with DHS, should provide additional information to describe how the projects and activities associated with the reform proposal to solve the cybersecurity workforce shortage will address our high-risk issues related to ensuring the cybersecurity of the nation. (Recommendation 4)

Agency: Executive Office of the President: Office of Management and Budget: Office of the Director
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of OMB, working with DHS, should develop a government-wide workforce plan that assesses the effects of the reform proposal to solve the cybersecurity workforce shortage on the current and future federal workforce. (Recommendation 5)

Agency: Executive Office of the President: Office of Management and Budget: Office of the Director
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of OMB should assess the costs and benefits of options for operating the GEAR Center. (Recommendation 6)

Agency: Executive Office of the President: Office of Management and Budget: Office of the Director
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of OMB should develop an implementation plan that includes outcome-oriented goals, timelines, key milestones, and deliverables to track and communicate implementation progress of the reform proposal to establish the GEAR Center. (Recommendation 7)

Agency: Executive Office of the President: Office of Management and Budget: Office of the Director
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Commerce should ensure that the agency's Chief Information Officer updates the telecommunications inventory to include all telecommunications assets and services in use at the agency, and updates Commerce's process for ongoing maintenance of the inventory to include the complete inventory. (Recommendation 1)

Agency: Department of Commerce: Office of the Secretary
Status: Open

Comments: Commerce concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Commerce should ensure that the agency's Chief Information Officer completes efforts to identify future telecommunications needs using a complete inventory of existing telecommunications services; conducts and documents a comprehensive strategic analysis at all bureaus to identify areas for optimization and sharing of telecommunications resources; evaluates the costs and benefits of implementing new telecommunications technology and alternative options at all bureaus; and fully aligns Commerce's telecommunications needs with its long-term IT plans and enterprise architecture. (Recommendation 2)

Agency: Department of Commerce: Office of the Secretary
Status: Open

Comments: Commerce concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Commerce should ensure that the agency's Chief Information Officer finalizes the responsibilities related to the information security management role during the telecommunications transition, and assigns the roles for providing legal expertise during the transition, as well as for managing human capital, telecommunications assets, and information security during the transition, to staff members; describes how changes and disruptions related to the transition will be communicated to end users at all bureaus and identifies the key local and regional agency transition officials responsible for disseminating information about the transition to employees and working with the vendor to facilitate transition activities in Commerce's transition communications plan; and establishes and implements configuration and change management processes for its transition. (Recommendation 3)

Agency: Department of Commerce: Office of the Secretary
Status: Open

Comments: Commerce concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Commerce should ensure that the agency's Chief Information Officer identifies all of the funding needed to support the telecommunications transition; justifies requests for resources related to transition program management staff; conducts an analysis to identify staff resources needed for the entire transition effort; and analyzes training needs for staff assisting with the transition. (Recommendation 4)

Agency: Department of Commerce: Office of the Secretary
Status: Open

Comments: Commerce concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Commerce should ensure that the agency's Chief Information Officer takes into account the agency's telecommunications transition risks, mission critical systems, and contingency plans in Commerce's transition time line. (Recommendation 5)

Agency: Department of Commerce: Office of the Secretary
Status: Open

Comments: Commerce concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer develops a policy that requires the agency's components to maintain an inventory of the telecommunications assets and services that they acquire independently from headquarters; updates the telecommunications inventory to include all telecommunications assets and services in use at HHS, and updates the agency's process for ongoing maintenance of the inventory to include the complete inventory. (Recommendation 6)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer completes efforts to identify future telecommunications needs using a complete inventory of existing telecommunications services; and aligns HHS's telecommunications needs with its long-term IT plans. (Recommendation 7)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer identifies and documents telecommunications transition roles and responsibilities related to (1) managing assets and human capital during the planning and execution phases of the transition and (2) providing legal expertise during the execution phase of the transition, and assigns the transition information security management role to a staff member; and establishes and implements configuration and change management processes for HHS's transition. (Recommendation 8)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer identifies all of the funding needed to support the telecommunications transition at each of the agency's components, justifies requests for transition resources related to hardware and software upgrades, conducts an analysis to identify staff resources needed for the entire transition effort, and analyzes training needs for staff assisting with the transition. (Recommendation 9)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer completes efforts to identify telecommunications transition measures of success that can be used to assess transition progress; and takes into account all of the agency's components, as well as its mission critical systems, contingency plans,and telecommunications transition risks, in HHS's transition time line. (Recommendation 10)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of State should ensure that the agency's Chief Information Officer updates the telecommunications inventory to include all telecommunications assets and services in use at the agency, and updates State's process for ongoing maintenance of the inventory to include the complete inventory. (Recommendation 11)

Agency: Department of State: Office of the Secretary
Status: Open

Comments: State concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: he Secretary of State should ensure that the agency's Chief Information Officer completes efforts to identify the agency's future telecommunications needs using a complete inventory of existing telecommunications services; conducts and documents a strategic analysis to justify the sharing of telecommunications resources; and aligns State's telecommunications needs with its long-term IT plans and enterprise architecture. (Recommendation 12)

Agency: Department of State: Office of the Secretary
Status: Open

Comments: State concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of State should ensure that the agency's Chief Information Officer identifies telecommunications transition roles and responsibilities related to (1) managing assets during the planning and execution phases of the transition and (2) providing legal expertise during the execution phase of the transition, and finalizes the responsibilities related to the information security management role for the transition; includes in State's transition communications plan the frequency with which transition status updates and meetings will occur throughout the transition, a description of how changes and disruptions related to the transition will be communicated to end-users, and the key local and regional agency transition officials responsible for disseminating information about the transition to employees and working with the vendor to facilitate transition activities; and establishes configuration management processes for the agency's transition. (Recommendation 13)

Agency: Department of State: Office of the Secretary
Status: Open

Comments: State concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of State should ensure that the agency's Chief Information Officer identifies all of the funding needed to support the telecommunications transition, justifies requests for resources related to transition program management staff, conducts an analysis to identify staff resources needed for the entire transition effort, and finalizes its analysis of training needs for staff assisting with the transition. (Recommendation 14)

Agency: Department of State: Office of the Secretary
Status: Open

Comments: State concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of State should ensure that the agency's Chief Information Officer takes into account the agency's telecommunications transition risks, mission critical systems, and contingency plans in State's transition time line. (Recommendation 15)

Agency: Department of State: Office of the Secretary
Status: Open

Comments: State concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency's Chief Information Officer updates the telecommunications inventory to include all telecommunications assets and services in use at the agency, and updates and finalizes VA's process for ongoing maintenance of the inventory to include the complete inventory. (Recommendation 16)

Agency: Department of Veterans Affairs: Office of the Secretary
Status: Open

Comments: VA concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency's Chief Information Officer completes efforts to identify future telecommunications needs using a complete inventory of existing telecommunications services, and determines and documents that VA's telecommunications needs are aligned with its long-term IT plans. (Recommendation 17)

Agency: Department of Veterans Affairs: Office of the Secretary
Status: Open

Comments: VA concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency's Chief Information Officer includes in its telecommunications transition communications plan the key local and regional agency officials responsible for disseminating information about the transition to employees and working with the vendor to facilitate transition activities; and establishes and uses cost and schedule management processes in the agency's transition. (Recommendation 18)

Agency: Department of Veterans Affairs: Office of the Secretary
Status: Open

Comments: VA concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency's Chief Information Officer identifies and documents all of the funding needed to support the telecommunications transition, including costs for all years of transition planning support; justifies requests for transition resources related to program management staff; conducts an analysis to identify staff resources needed for the entire transition effort; and analyzes training needs for staff assisting with the transition. (Recommendation 19)

Agency: Department of Veterans Affairs: Office of the Secretary
Status: Open

Comments: VA concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency's Chief Information Officer completes efforts to identify telecommunications transition measures of success that can be used to assess transition progress; and takes into account the agency's telecommunications transition risks, mission critical systems, and contingency plans in VA's transition time line. (Recommendation 20)

Agency: Department of Veterans Affairs: Office of the Secretary
Status: Open

Comments: VA concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Administrator of the National Aeronautics and Space Administration should ensure that the agency's Chief Information Officer updates the telecommunications inventory to include all telecommunications assets and services in use at the agency, and updates NASA's process for ongoing maintenance of the inventory to include the complete inventory. (Recommendation 21)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. We will continue to follow-up on the agency's efforts to address it.

Recommendation: The Administrator of the National Aeronautics and Space Administration should ensure that the agency's Chief Information Officer completes efforts to identify the agency's future telecommunications needs using a complete inventory of existing telecommunications services. (Recommendation 22)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. We will continue to follow-up on the agency's efforts to address it.

Recommendation: The Administrator of the National Aeronautics and Space Administration should ensure that the agency's Chief Information Officer identifies telecommunications transition roles and responsibilities related to (1) managing human capital during the planning and execution phases of the transition and (2) providing legal expertise during the execution phase of the transition. (Recommendation 23)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. We will continue to follow-up on the agency's efforts to address it.

Recommendation: The Administrator of the National Aeronautics and Space Administration should ensure that the agency's Chief Information Officer conducts an analysis to support the anticipated cost savings identified as part of the agency's justification for its resource requests related to hardware and software upgrades for the telecommunications transition, and justifies its resource requests for transition program management staff; conducts an analysis to identify staff resources needed for the entire transition effort; and analyzes training needs for staff assisting with the transition. (Recommendation 24)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. We will continue to follow-up on the agency's efforts to address it.

Recommendation: The Administrator of the National Aeronautics and Space Administration should ensure that the agency's Chief Information Officer takes into account the agency's mission critical systems and contingency plans in NASA's telecommunications transition time line. (Recommendation 25)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. We will continue to follow-up on the agency's efforts to address it.

Recommendation: The TSA Administrator should update the BASE cybersecurity template to ensure it reflects cybersecurity key practices, including the Detect and Recover functions outlined in the NIST Cybersecurity Framework. (Recommendation 2)

Agency: Department of Homeland Security: Transportation Security Administration
Status: Open

Comments: TSA concurred with this recommendation and said it would take steps to implement it by updating the BASE Cybersecurity Security Action Item section to ensure it reflects the NIST Cybersecurity Framework Detect and Recover functions. When we confirm what actions TSA has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of United States Citizenship and Immigration Services should work with the Assistant Secretary for the Employment and Training Administration to assess options for changing the H-2B visa program and, as warranted, implement changes or submit proposed legislative changes to Congress. DHS and DOL could consider options included in their June 2019 report to Congress and identify those that may be implemented cost effectively and without adversely affecting U.S. workers. (Recommendation 1)

Agency: Department of Homeland Security: United States Citizenship and Immigration Services
Status: Open

Comments: DHS agreed with this recommendation and noted that it plans to work further with DOL to explore options for improving the H-2B visa program and possibly develop proposals for legislative changes.

Recommendation: The Assistant Secretary for the Employment and Training Administration should work with the Director of United States Citizenship and Immigration Services to assess options for changing the H-2B visa program and, as warranted, implement changes or submit proposed legislative changes to Congress. DOL and DHS could consider options included in their June 2019 report to Congress and identify those that may be implemented cost effectively and without adversely affecting U.S. workers. (Recommendation 2)

Agency: Department of Labor: Employment and Training Administration
Status: Open

Comments: DOL agreed with this recommendation. DOL said it is prepared to work with DHS to consider options for changing the H-2B program and to provide any technical assistance that Congress may need on this issue. We will monitor the agency's progress to implement this recommendation.

Recommendation: The Director of United States Citizenship and Immigration Services should work with the Assistant Secretary for the Employment and Training Administration to assess the advantages and disadvantages of considering current economic trends in determining the appropriate number of additional H-2B visas to provide when given this authority by Congress and, as warranted, implement an approach that considers such trends. (Recommendation 3)

Agency: Department of Homeland Security: United States Citizenship and Immigration Services
Status: Open

Comments: DHS did not agree with this recommendation. DHS said it would continue to work with DOL-as it has done in prior years--if and when Congress delegates the authority to make additional H-2B visas available beyond the statutory cap to DHS. The agency also expressed its view that Congress is better positioned to determine whether and how many additional visas should be made available to meet the needs of U.S. businesses. In fiscal years 2017 through 2020, DHS was authorized to increase the number of H-2B visas beyond the statutory cap, after consulting with DOL to determine that "the needs of American businesses [could not] be satisfied...with United States workers..." In exercising this authority in prior years, DHS stated that "[t]he scope of the assessment called for by the statute [in making this determination] is quite broad, and accordingly delegates the Secretary of Homeland Security broad discretion to identify the business needs [s]he finds most relevant." In light of DHS's broad view of its authority, we continue to believe that it would be appropriate for DHS, in consultation with DOL, to assess the advantages and disadvantages of considering current economic trends in determining the appropriate number of additional H-2B visas to provide. If they determine that using such data would be warranted, the agencies would then be well positioned to implement such an approach if DHS is granted such authority in the future. Moreover, if-as DHS stated in its response to our recommendation-the agency believes that Congress is best suited to determine what increases in visa numbers may be needed to meet the needs of U.S. businesses, consistent with protecting American workers, it may wish to work with Congress to draft a legislative proposal reflecting this view.

Recommendation: The Assistant Secretary for the Employment and Training Administration should work with the Director of United States Citizenship and Immigration Services to assess the advantages and disadvantages of considering current economic trends in determining the appropriate number of additional H-2B visas to provide when given this authority by Congress and, as warranted, implement an approach that considers such trends. (Recommendation 4)

Agency: Department of Labor: Employment and Training Administration
Status: Open

Comments: DOL agreed with this recommendation. The agency plans to draw on its data on labor market and economic trends to provide technical assistance to DHS on the determination of how many additional H-2B visas to make available.

Recommendation: The Assistant Secretary for the Employment and Training Administration should take steps to target its audits of H-2B employers to employers with the highest likelihood of violating program requirements; such steps could include moving ahead with developing a system for identifying trends in H-2B employer audit outcomes. (Recommendation 5)

Agency: Department of Labor: Employment and Training Administration
Status: Open

Comments: DOL agreed with this recommendation. DOL noted that while further development of a system for tracking industry and occupational trends in H-2B employer violations is currently on hold due to budgetary constraints, when this system is available it will provide the capacity to take a risk-based approach to selecting employers for audits. We will monitor the agency's progress to implement this recommendation.

Recommendation: GSA should assess and address the reliability of the information used to calculate reported cost savings for the broker program. (Recommendation 1)

Agency: General Services Administration
Status: Open
Priority recommendation

Comments: In June 2020, GSA said the agency would validate system data through regional and broker outreach and fully utilize validated system data to manage the broker program. The agency also said it will develop a quality control plan and follow-up on outcomes. We will continue to monitor GSA's progress with implementing this recommendation.

Recommendation: GSA should develop outcome-based metrics to evaluate the effectiveness of using brokers to supplement the GSA's leasing workforce. (Recommendation 2)

Agency: General Services Administration
Status: Open

Comments: Although GSA initially did not concur with this recommendation, the agency stated in June 2020 that it agrees with the recommendation and will take steps to implement it. Specifically, GSA plans to revise the broker performance standards and document broker effectiveness through lease cost avoidance, timely lease replacement, and earned commission credits. We will continue to monitor GSA's progress with implementing this recommendation.

Recommendation: The NMFS Assistant Administrator for Fisheries should work with the South Atlantic and Gulf of Mexico councils, and other councils as appropriate, to develop documented processes for conducting allocation reviews. (Recommendation 1)

Agency: Department of Commerce: National Oceanic and Atmospheric Administration: National Marine Fisheries Service
Status: Open

Comments: Commerce and NOAA agreed with this recommendation and stated that NOAA's NMFS will work to implement it to the extent possible. We will continue to monitor NMFS' efforts to do so.

Recommendation: The NMFS Assistant Administrator for Fisheries should work with the South Atlantic and Gulf of Mexico councils, and other councils as appropriate, to specify how the councils will document their allocation reviews, including the basis for their allocation decisions, whether fishery management plan objectives are being met, and what factors were considered in the reviews. (Recommendation 2)

Agency: Department of Commerce: National Oceanic and Atmospheric Administration: National Marine Fisheries Service
Status: Open

Comments: Commerce and NOAA agreed with this recommendation and stated that NOAA's NMFS will work to implement it to the extent possible. We will continue to monitor NMFS' efforts to do so.

Recommendation: The Secretary of the Department of Agriculture should direct the Assistant Secretary for Civil Rights to publicize promising practices for Title IX compliance on its websites for their university grantees. (Recommendation 1)

Agency: Department of Agriculture
Status: Open

Comments: USDA agreed with the recommendation. In its March 2020 formal comment letter, the department stated that it will ensure promising practices information is posted to websites for the Office of the Assistant Secretary for Civil Rights (OASCR) and the National Institute of Food and Agriculture. Additionally, a notice will be sent to universities to ensure they are aware the information is available, along with specifics regarding access to the same.

Recommendation: The Secretary of Energy should direct the Director of the Office of Economic Impact and Diversity to publicize promising practices for Title IX compliance on its websites for their university grantees. (Recommendation 2)

Agency: Department of Energy: Office of the Secretary
Status: Open

Comments: DOE agreed with the recommendation. In its February 2020 formal comment letter, the department stated that the Office of Civil Rights and Diversity (OCRD) has identified promising practices on an ongoing basis in its Title IX compliance review reports. OCRD will develop and publicize a promising practices guide on its website for reference by university grantees. The estimated completion date is June 1, 2020. GAO will review this action once it receives documentation from DOE.

Recommendation: The Secretary of the Department of Health and Human Services should direct the Director for the Office for Civil Rights to publicize a stand-alone list of promising practices for Title IX compliance on its websites for their university grantees. (Recommendation 3)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS agreed with the recommendation. In its February 2020 formal comment letter, the department stated the Office for Civil Rights will incorporate effective practices from materials posted on its website and external sources in a stand-alone list of effective practices to help universities comply with Title IX. The Office for Civil Rights will also draw from its Title IX enforcement work to update the effective practices list on an ongoing basis.

Recommendation: The Secretary of Energy should direct the Director of the Office of Economic Impact and Diversity to finalize and publish Title IX complaint procedures, consistent with DOJ's regulations. (Recommendation 4)

Agency: Department of Energy: Office of the Secretary
Status: Open

Comments: DOE agreed with the recommendation. In its February 2020 formal comment letter, the department stated that the Office of Civil Rights and Diversity (OCRD) has developed a draft outline of complaint procedures. OCRD is benchmarking these procedures against NASA and NSF external civil rights complaint procedures. OCRD will finalize and publish Title IX complaint procedures, consistent with the Department of Justice's regulations. The estimated completion date is October 31, 2020.

Recommendation: The Secretary of the Department of Agriculture should direct the Assistant Secretary for Civil Rights to finalize and publish revised Title IX complaint procedures. (Recommendation 5)

Agency: Department of Agriculture
Status: Open

Comments: USDA agreed with the recommendation to finalize and publish Title IX complaint procedures. According to the department's March 2020 formal comment letter, USDA's Departmental Regulation (DR) 4330-002, Nondiscrimination in Program and Activities Receiving Federal Financial Assistance from USDA, addresses processing Title IX administrative complaints filed with the Department in any program or activity receiving financial assistance from USDA. The Departmental Regulation (DR) 4330-002 was revised in 2019 and is currently in the clearance process for publication.

Recommendation: The Secretary of the Department of Agriculture should direct the Assistant Secretary for Civil Rights to clarify on its website that individuals on USDA-funded grants can file Title IX complaints through the Assistant Secretary for Civil Rights—including clarifying who is considered "customers." (Recommendation 6)

Agency: Department of Agriculture
Status: Open

Comments: USDA agreed with this recommendation. According to the department's March 2020 formal comment letter, USDA's Office of the Assistant Secretary for Civil Rights (OASCR) will add language on its website to make clear recipients of USDA-funded grants are included in the definition of a customer and, as such, may file Title IX complaints through OASCR. Additionally, the requested information will be added to the Frequently Asked Questions section on OASCR' s website.

Recommendation: The Secretary of the Department of Health and Human Services should direct the Director for the Office for Civil Rights to assess the feasibility of receiving and reviewing concerns of sex discrimination—including sexual harassment—and communicating to individuals on agency-funded grants the option to notify the agency of these concerns, outside of the Title IX complaint process. (Recommendation 7)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS agreed with the recommendation. In its February 2020 formal comment letter, the department stated that outside of the Title IX enforcement process, the Office for Civil Rights updated its sex discrimination web pages to inform persons on how to file complaints of discrimination directly to the Office for Civil Rights, including complaints of sexual harassment. The Office for Civil Rights has also incorporated information about Title IX rights and obligations in outreach material used on university campuses, including information addressing sexual harassment.

Recommendation: The Secretary of Energy should direct the Director of the Office of Economic Impact and Diversity to assess the feasibility of receiving and reviewing concerns of sex discrimination—including sexual harassment—and communicating to individuals on agency-funded grants the option to notify the agency of these concerns, outside of the Title IX complaint process. (Recommendation 8)

Agency: Department of Energy: Office of the Secretary
Status: Open

Comments: DOE agreed with the recommendation. In its February 2020 formal comment letter, the department stated that the Office of Civil Rights and Diversity (OCRD) will evaluate the feasibility of receiving and reviewing concerns of discrimination, including sexual harassment, outside of the Title IX complaint process described in DOE's Title IX regulations, as well as communicating this option to individuals on DOE funded grants. The estimated completion date is December 31, 2020.

Recommendation: The Administrator of NASA should assess the feasibility of receiving and reviewing concerns of sex discrimination—including sexual harassment—and communicating to individuals on agency-funded grants the option to notify the agency of these concerns, outside of the Title IX complaint process. (Recommendation 9)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA agreed with the recommendation. According to the agency's February 2020 formal comment letter, NASA plans to assess the feasibility of receiving and reviewing concerns of sex discrimination and harassment and communicating to individuals on agency-funded grants the option to notify the agency of these concerns. In conducting the feasibility assessment, NASA will benchmark with agencies that currently have the capability to receive and review concerns of sex discrimination, including sexual harassment. NASA will also examine internal resources to ensure successful implementation. NASA estimates completion by September 20, 2020.

Recommendation: The Secretary of the Department of Agriculture should direct the Assistant Secretary for Civil Rights to assess the feasibility of receiving and reviewing concerns of sex discrimination—including sexual harassment—and communicating to individuals on agency-funded grants the option to notify the agency of these concerns, outside of the Title IX complaint process. (Recommendation 10)

Agency: Department of Agriculture
Status: Open

Comments: USDA agreed with this recommendation. According to the department's March 2020 formal comment letter, USDA is to direct the Office of the Assistant Secretary for Civil Rights (OASCR) to assess the feasibility of receiving and reviewing concerns of sex discrimination (including sexual harassment) and including language in agency-funded grants on the option to notify the agency of harassment issues outside of the Title IX complaint process. The Office of the Mission Area Liaison within OASCR will assess the feasibility of creating a tracking system to capture inquiries and concerns outside of the Title IX complaint process. If feasible, the system will serve as a risk assessment tool to identify issues, potential violations, trends, risks, and areas prime for focused compliance review, according to USDA's formal comment letter.

Recommendation: The Secretary of the Department of Health and Human Services should direct the Director for the Office for Civil Rights and the Director of NIH to develop and implement formal procedures for sharing relevant information about Title IX (compliance reviews, violations, and complaints) and sex discrimination concerns, including sexual harassment. For example, HHS components should internally share information regarding findings of Title IX violations, concerns of sex discrimination, including sexual harassment, and Title IX compliance review reports. (Recommendation 11)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS agreed with the recommendation. In its February 2020 formal comment letter, the department stated that the Office for Civil Rights and NIH will review the current procedure for sharing information, and development and implement (as necessary) formal procedures for sharing relevant information about Title IX and sexual harassment concerns. Furthermore, an action plan to address the recommendation will be provided in the department's 180-day letter response to Congress.

Recommendation: The Secretary of Energy should establish goals and an overall plan to assess all of the agency's sexual harassment prevention efforts for their university grantees, including methods to regularly monitor and evaluate its sexual harassment prevention policies and communication mechanisms (e.g. Title IX or sex discrimination websites). (Recommendation 12)

Agency: Department of Energy: Office of the Secretary
Status: Open

Comments: DOE agreed with the recommendation. In its February 2020 formal comment letter, the department stated that the Office of Civil Rights and Diversity will conduct research into best practices for harassment prevention efforts for university grantees and benchmark with other federal agencies. The estimated completion date for establishment of goals is January 31, 2021 and the estimated completion date for establishment of an overall plan is August 31, 2021.

Recommendation: The Secretary of the Department of Health and Human Services should establish goals and an overall plan to assess all of the agency's sexual harassment prevention efforts for their university grantees, including methods to regularly monitor and evaluate its sexual harassment prevention policies and communication mechanisms (e.g. Title IX or sex discrimination websites). (Recommendation 13)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS agreed with the recommendation. In its February 2020 formal comment letter, the department stated that NIH has created goals for all NIH grantee sexual harassment prevention efforts, as noted in GAO's report. NIH will develop a plan to assess progress towards achieving those goals, including methods to regularly monitor and evaluate policies and communication methods. To the extent Title IX enforcement and outreach efforts may prevent sexual harassment, the Office for Civil Rights will develop a plan for leveraging enforcement efforts and outreach communications to help HHS grantees implement prevention efforts. HHS will submit an action plan that fully address department efforts regarding this recommendation in its 180-day letter response to Congress.

Recommendation: The Administrator of NASA should establish goals and an overall plan to assess all of the agency's sexual harassment prevention efforts for their university grantees, including methods to regularly monitor and evaluate its sexual harassment prevention policies and communication mechanisms (e.g. Title IX or sex discrimination websites). (Recommendation 14)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA agreed with the recommendation. According to the agency's February 2020 formal comment letter, NASA accepts its responsibility to establish policies and communication mechanisms to help university grantees to prevent sexual harassment, and the agency is committed to ongoing monitoring and evaluation of these efforts. At the same time, NASA judges that the most effective way to discharge these responsibilities is to adopt the approach now being developed by the National Science and Technology Council. NASA will establish goals, plans, and methods pursuant to this recommendation by adopting the policies and approaches developed through the interagency process. The estimated completion is to be determined based on timelines and milestones established by the Office of Science and Technology Policy's Safe and Inclusive Research Environments Subcommittee Subcommittee.

Recommendation: The Director of NSF should establish goals and an overall plan to assess all of the agency's sexual harassment prevention efforts for their university grantees, including methods to regularly monitor and evaluate its sexual harassment prevention policies and communication mechanisms (e.g. Title IX or sex discrimination websites). (Recommendation 15)

Agency: National Science Foundation
Status: Open

Comments: NSF agreed with the recommendation. According to the agency's February 2020 formal comment letter, NSF is embarking on an assessment process to improve its policies and practices continually in order to achieve the goal of safe and inclusive research environments.

Recommendation: The Secretary of the Department of Agriculture should establish goals and an overall plan to assess all of the agency's sexual harassment prevention efforts for their university grantees, including methods to regularly monitor and evaluate its sexual harassment prevention policies and communication mechanisms (e.g. Title IX or sex discrimination websites). (Recommendation 16)

Agency: Department of Agriculture
Status: Open

Comments: USDA agreed with this recommendation. According to the department's March 2020 formal comment letter, USDA will consider developing language to include in university grantees' terms and conditions regarding allegations of sexual harassment. Additionally, the Office of the Assistant Secretary for Civil Rights (OASCR) will reach out to other agencies within the Title IX Quarterly Working Group to assess best practices for monitoring and evaluating sexual harassment prevention policies and communication mechanisms. Finally, USDA will increase its communication with university grantees and increase oversight through compliance reviews.

Recommendation: In consultation with DOE, HHS, NASA, NSF, and USDA, the Assistant Attorney General for the Department of Justice should direct the responsible Civil Rights Division sections to fully adopt two federal interagency leading practices—agree on agency's roles and responsibilities and develop mechanisms to monitor, evaluate, and report results of collaborative efforts, for its Quarterly Title IX STEM discussion group. (Recommendation 17)

Agency: Department of Justice: Office of the Assistant Attorney General for Administration
Status: Open

Comments: DOJ generally agreed with the recommendation. According to the department's February 2020 formal comment letter, the Civil Rights Division (CRT) is prepared to delineate agencies' roles and responsibilities within the Quarterly Title IX STEM Discussion Group and is willing to develop an enhanced process for evaluating, monitoring, and reporting on the group's collaborations in enforcing Title IX that is achievable within DOJ's current resource allocation, or if more resources become available.

Recommendation: The Secretary of HHS should direct the Biodefense Coordination Team to establish a plan that includes change management practices—such as strategies for feedback, communication, and education—to reinforce collaborative behaviors and enterprise-wide approaches and to help prevent early implementation challenges from becoming institutionalized. (Recommendation 1)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open
Priority recommendation

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of HHS should direct the Biodefense Coordination Team to clearly document guidance and methods for analyzing the data collected from the agencies, including ensuring that nonfederal resources and capabilities are accounted for in the analysis. (Recommendation 2)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open
Priority recommendation

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of HHS should direct the Biodefense Coordination Team to establish a resource plan to staff, support, and sustain its ongoing efforts. (Recommendation 3)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open
Priority recommendation

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of HHS should direct the Biodefense Coordination Team to clearly document agreed upon processes, roles, and responsibilities for making and enforcing enterprise-wide decisions. (Recommendation 4)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open
Priority recommendation

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Homeland Security should identify the information about family members apprehended together that its components collectively need to process those family members and communicate that information to its components. (Recommendation 1)

Agency: Department of Homeland Security
Status: Open

Comments: According to DHS, in June 2020, DHS's Office of Immigration Statistics launched a Family Status Data Standards Community of Interest (COI) under the purview of the DHS Immigration Data Integration Initiative. In August 2020, DHS reported that the Family Status COI includes subject matter experts and data system managers from DHS components, the Department of Health and Human Services, and the Executive Office for Immigration Review. The COI's mandate includes drafting common DHS-wide and interagency data standards (common codes, common definitions, common formats) for all topics related to family status, including codes to identify the reasons for family separation, members apprehended together, and unaccompanied children. DHS expects to complete these actions by September 30, 2020. Identifying and communicating department-wide information needs with respect to family members who have been apprehended together should help provide DHS with greater assurance that its components are identifying all individuals who may be eligible for relief from removal from the United States based on their family relationships.

Recommendation: The Secretary of Homeland Security should ensure that, at the time of apprehension, CBP collects the information that DHS components collectively need to process family members apprehended together. (Recommendation 2)

Agency: Department of Homeland Security
Status: Open

Comments: In commenting on a draft of our report, DHS reported that its Office of Immigration Statistics (OIS) will work with relevant components and offices to ensure all required information is collected at the time of apprehension on the Form I-213 when processing family members apprehended together. As of August 2020, DHS reported that DHS OIS continues to work with relevant components and offices to ensure all required information is collected at the time of apprehension on Form I-213 when processing family members apprehended together. DHS expects to complete these actions by September 30, 2020. Collecting information about the relationships between family members apprehended together and documenting that information on the Form I-213 could help address fragmentation among DHS components and improve the information available to other agencies.

Recommendation: The Secretary of Homeland Security should ensure that CBP documents the information that DHS components collectively need to process family members apprehended together on the Form I-213. (Recommendation 3)

Agency: Department of Homeland Security
Status: Open

Comments: In commenting on a draft of our report, DHS reported that, upon implementation of the steps the department plans to take in response to our second recommendation, CBP will issue guidance to the field to ensure that CBP agents and officers document the information that DHS components collectively need to process family members. In August 2020, DHS reported that component agencies continue to collaborate to define the process of family members apprehended together, as will be reflected on CBP Form I-213. DHS estimates issuing this guidance by March 31, 2021. Collecting information about the relationships between family members apprehended together and documenting that information on the Form I-213 could help address fragmentation among DHS components and improve the information available to other agencies.immigration or other proceedings.

Recommendation: The Secretary of Homeland Security should evaluate options for developing a unique identifier shared across DHS components' data systems to link family members apprehended together. (Recommendation 4)

Agency: Department of Homeland Security
Status: Open

Comments: In commenting on a draft of our report, DHS reported that its Office of Immigration Statistics (OIS) plans to work with relevant components to develop a unique shared identifier linking family members apprehended together. According to DHS, DHS OIS launched the Family Status Community of Interest (COI) in June 2020, and the COI has since established a bi-weekly meeting schedule. The COI's initial focus is on standard codes describing the reasons for family separations. Upon completing the family separation reason standard, DHS reported that the COI will prioritize developing common codes to identify family members apprehended together. DHS estimates completing these actions by March 31, 2021. Evaluating options for developing a shared unique family member identifier across components that would allow each component access to certain information about family members apprehended together would help bridge the information gaps about family relationships between components caused by DHS's fragmented data systems.

Recommendation: The Chairman of FCC should develop specific, measurable goals and performance measures for its efforts to monitor the performance of new WEA capabilities, such as enhanced geo-targeting and expanded alert message length. (Recommendation 1)

Agency: Federal Communications Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the IPAWS program should document how it plans to address key actions needed to educate alerting authorities in their use of IPAWS and implement a mechanism that will allow FEMA to regularly and systematically obtain and analyze feedback on alerting authorities' educational needs. (Recommendation 2)

Agency: Department of Homeland Security: Directorate of Emergency Preparedness and Response: Federal Emergency Management Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the IPAWS program should establish procedures to prioritize pending IPAWS applications and to follow up with applicants to address these applications. (Recommendation 3)

Agency: Department of Homeland Security: Directorate of Emergency Preparedness and Response: Federal Emergency Management Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of FAA should direct the Aviation Workforce Steering Committee, as part of its ongoing efforts, to take steps to use existing FAA data and coordinate with other federal agencies to identify and gather the information it needs to measure progress and target resources toward its goal of promoting a robust, qualified, and diverse aviation maintenance workforce. For example, FAA could task a committee working group with developing and implementing ways to improve data sharing among federal agencies to inform decision-making on how to strengthen career pathways and better understand the supply and demand of certificated workers. (Recommendation 1)

Agency: Department of Transportation: Federal Aviation Administration: Office of the Administrator
Status: Open

Comments: DOT agreed with this recommendation. Specifically, the agency agreed that using existing data could potentially contribute to its efforts to develop the aviation maintenance workforce. DOT said it will ask the Aviation Workforce Steering Committee to consider using existing FAA data and to coordinate with other federal agencies regarding other potential data sources to support the FAA's aviation maintenance workforce goals. We will consider closing this recommendation when these and other efforts to address this recommendation are complete.

Recommendation: The Administrator of GSA should coordinate with agencies to ensure that street address information in the public database is complete and correctly formatted. (Recommendation 1)

Agency: General Services Administration
Status: Open
Priority recommendation

Comments: GSA has taken steps to address this recommendation. GSA revised certain data elements' definitions in 2020 and incorporated them into the 2020 FRPP data dictionary to enhance the accuracy and completeness of the data reported to FRPP. In addition, the Federal Real Property Council established a data governance working group that meets regularly to address challenges to reliable and complete data in the FRPP. In September 2020, that group committed to developing an action plan to outline the steps to improve the location information in FRPP that we identified in February 2020. If these efforts succeed, GAO will close this recommendation as implemented.

Recommendation: The Administrator of GSA should coordinate with agencies to review V&V anomaly categories to better target incorrect data. (Recommendation 2)

Agency: General Services Administration
Status: Open

Comments: GSA has taken steps to address this recommendation. The Federal Real Property Council established a data governance working group that meets regularly to address challenges to reliable and complete data in the FRPP. In September 2020, GSA described step that the working group has taken to make V&V anomaly categories better target incorrect data. GSA is currently assessing these actions.

Recommendation: The Administrator of GSA should work in consultation with agencies to determine which, if any, data should be withheld from public release. (Recommendation 3)

Agency: General Services Administration
Status: Open

Comments: GSA staff said that the agency now agrees with this recommendation and in an September 2020 meeting said that GSA staff were working with relevant agencies to address it. GAO will continue to monitor their progress.

Recommendation: The Administrator of GSA should instruct each agency to apply a consistent, risk-based approach in determining which, if any, assets or asset-specific information should be withheld from public release. (Recommendation 4)

Agency: General Services Administration
Status: Open

Comments: GSA agreed with this recommendation and in an September 2020 meeting said that GSA staff were working with relevant agencies to address it. GAO will continue to monitor their progress.

Recommendation: The Administrator of GSA should allow agencies to provide summary data for secure installations. (Recommendation 5)

Agency: General Services Administration
Status: Open

Comments: In April 2020, GAO staff met with GSA and Interagency Security Committee officials. The officials explained that they had had discussions to determine what installations would be considered secure installations and were considering what changes to make to the data. GAO will continue to monitor their actions. In September 2020, GSA confirmed that the Federal Real Property Council was working on the issue.

Recommendation: The Administrator of GSA should link all of GSA's publicly available realproperty data sources. (Recommendation 6)

Agency: General Services Administration
Status: Open

Comments: GSA agreed with this recommendation and in an September 2020 meeting said that GSA staff summarized the actions the agency has taken to link all of the real property data sources. GAO is currently assessing the actions.

Recommendation: The Secretary of Homeland Security should develop a strategy to independently validate selected agencies' self-reported actions on meeting binding operational directive requirements, where feasible, using a risk-based approach. (Recommendation 2)

Agency: Department of Homeland Security: Office of the Secretary
Status: Open

Comments: DHS has drafted a preliminary strategy to independently validate agencies' actions, using a risk-based approach. However, this strategy has not yet been finalized and needs to more clearly align to the existing directive development process, to which it serves as an addendum. The strategy should include when and how primary and secondary sources of information for independent validation are selected within the directive development process.

Recommendation: The Secretary of Homeland Security should develop a schedule and plan for completing the high value asset program reassessment and addressing the outstanding issues on completing the required high value asset assessments, identifying needed resources, and finalizing guidance for Tier 2 and 3 HVA systems. (Recommendation 4)

Agency: Department of Homeland Security: Office of the Secretary
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The FEC, in consultation with DOJ, should review guidance addressing coordination with DOJ, to include the MOU, and once a quorum of commissioners is in place, update that guidance as appropriate based on the review. (Recommendation 1)

Agency: Federal Election Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Attorney General, in consultation with the FEC, should review guidance addressing coordination with the FEC, to include the MOU, and once a quorum of commissioners is in place, update that guidance as appropriate based on the review. (Recommendation 2)

Agency: Department of Justice: Office of the Attorney General
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of State should take additional steps to identify diversity issues that could indicate potential barriers to equal opportunity in its workforce. For example, State could conduct additional analyses of workforce data and of employee groups' feedback. (Recommendation 1)

Agency: Department of State
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of Water Security of EPA, as Chair of the Water Sector Government Coordinating Council, should work with the council to identify existing technical assistance providers and engage these providers in a network to help drinking water and wastewater utilities incorporate climate resilience into their projects and planning on an ongoing basis. (Recommendation 1)

Agency: Environmental Protection Agency
Status: Open
Priority recommendation

Comments: In June 2020, EPA said that it will continue to work with its wide-ranging, existing technical assistance providers and coordinate with its stakeholders to identify additional providers as applicable. According to the agency, it is already taking action on the recommendation. While we agree that EPA should continue to work with its providers to improve technical assistance to utilities, our recommendation was for EPA to work with stakeholders to develop a network to provide coverage for the many drinking water and wastewater utilities across the country. EPA has not provided information to show that its plans will develop such a network. We will continue to monitor this recommendation to determine how the agency is working with stakeholders to build a network of providers.

Recommendation: The Administrator of GSA should direct the Office of Government-wide Policy (1) to incorporate into its guidance approaches or practices that agencies could use to assess utilization of and the ongoing need for property—approaches such as recommendations for periodic justifications, data analytics, and utilization reviews—and (2) to develop a plan and timelines for communicating the guidance to agencies government-wide. (Recommendation 1)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: As of April 2020, GSA indicated in its 180-day letter that it had published on its website draft guidance in response to the Federal Personal Property Management Act of 2018. In addition, GSA identified several actions it planned to take in the coming months, such as publishing a comprehensive plan and timelines to address GAO's recommendation, publishing a request for information in the Federal Register to seek comments and suggestions, and engaging additional subject matter experts and related associations and standards group to improve upon the draft guidance. GAO will continue to monitor GSA's efforts to implement this recommendation.

Recommendation: The Secretary of Agriculture should direct the Office of Property and Fleet Management to consistently monitor property provided to non-federal recipients within 1 year of receipt, and to ensure property is being used for its intended purpose 1 year after initial monitoring. (Recommendation 1)

Agency: Department of Agriculture
Status: Open

Comments: USDA concurred with this recommendation. As of April 2020, USDA's 180-day letter has not been received.

Recommendation: The Secretary of Energy should direct the Office of Asset Management to resume monitoring the Economic Development Property program, including property provided to non-federal recipients. (Recommendation 2)

Agency: Department of Energy: Office of the Secretary
Status: Open

Comments: As of March 2020, DOE indicated in its 180-day letter that the agency concurred with the recommendation, and will update their annual personal property reporting requirements. DOE anticipates having this recommendation implemented by September 30, 2020. GAO will continue to monitor DOE's efforts to implement this recommendation.

Recommendation: The Secretary of Labor should direct the Employment and Training Administration to take steps, such as reconciling data between Job Corps centers and the Job Corps National Office, to ensure that the entities responsible for overseeing and monitoring the Job Corps Program have accurate data on the excess property provided to non-federal recipients. (Recommendation 3)

Agency: Department of Labor: Office of the Secretary
Status: Open

Comments: As of February 2020, DOL indicated in its 180-day letter that they concurred with the recommendation, and have taken steps to improve the monitoring and oversight of Job Corps Property. This includes modifying the GSAXcess approval process by elevating review of all GSAXcess requests made by Job Corps Centers to DOL's Employment Training Administration's (ETA) national office. ETA is also working with DOL's Office of the Assistant Secretary for Administration and Management (OASAM) to develop a process for GSAXcess review that includes identifying approval levels for each category of property, identifying categories of property requiring additional review and approvals, and coordinating and streamlining access request procedures. These changes will be reflected in DOL's Office of Job Corps standard operating procedures (SOP), which is expected to be issued at the end of fiscal year 2020. DOL expects to provide training to Job Corps staff and Job Corps Centers in support of the SOP that will be provided annually. GAO will continue to monitor DOL's efforts to implement this recommendation.

Recommendation: The Secretary of Agriculture should direct the Office of Property and Fleet Management to establish clear processes to oversee property programs, including excess property provided to non-federal recipients across the agency. (Recommendation 4)

Agency: Department of Agriculture
Status: Open

Comments: USDA concurred with this recommendation. As of April 2020, USDA's 180-day letter has not been received.

Recommendation: The Secretary of Energy should direct the Office of Asset Management to update its regulations and guidance on programs that provide property to non-federal recipients to ensure regulations are current and establish a process to regularly communicate information about non-federal recipient programs to DOE program offices. (Recommendation 5)

Agency: Department of Energy: Office of the Secretary
Status: Open

Comments: As of March 2020, DOE indicated in its 180-day letter that the agency concurred with the recommendation, and will update internal policies, and provide personal property information on DOE's internal informational website known as Powerpedia. DOE anticipates implementing this recommendation by September 30, 2020. GAO will continue to monitor DOE's efforts to implement this recommendation.

Recommendation: The GSA Administrator should direct the Office of Government-wide Policy to revise the Personal Property Reporting Tool by updating the authorities agencies can select. (Recommendation 6)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: As of February 2020, GSA indicated in its 180-day letter that it concurred with the recommendation, and has taken steps to revise the Personal Property Reporting Tool (tool). GSA has added relevant authorities to the tool as recently as July 2019, and will continue to contact agencies to ensure relevant authorities are included in the tool. GSA is also evaluating technical updates to the tool to ensure that reporting agencies select an appropriate authority when reporting personal property. GSA plans to complete these actions by July 31, 2020, and inform agencies of these changes in their guidance by the end of fiscal year 2020. GAO will continue to monitor GSA's efforts to implement the recommendation.

Recommendation: The GSA Administrator should direct the Office of Government-wide Policy to document in what circumstances excess property loaned to non-federal recipients should be reported and what property GSA is reporting on behalf of agencies, for example, by updating GSA guidance. (Recommendation 7)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: As of February 2020, GSA indicated in its 180-day letter that it concurred with the recommendation. GSA will better communicate with agencies to better understand the confusion of reporting on loaned excess property, as reporting requirements are in statute, regulations, and guidance. GSA also plans to review and update by July 31, 2020, relevant regulations and guidance in this area including Federal Management Regulation Bulletin B-27, "Annual Executive Agency Reports on Excess and Exchange/Sale Personal Property." GAO will continue to monitor GSA's efforts to implement this recommendation.

Recommendation: The Director of OMB should establish a process for monitoring and holding agencies accountable for authorizing cloud services through FedRAMP. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget: Office of the Director
Status: Open
Priority recommendation

Comments: OMB neither agreed nor disagreed with this recommendation and as of September 2020, the office has not provided information on its actions to implement our recommendation. To fully implement this recommendation, OMB needs to collect data on the extent to which federal agencies are using cloud services authorized outside of FedRAMP and oversee agencies' compliance with using the program. According to an OMB Associate General Counsel, the agency does not have a mechanism for enforcing agencies' compliance with its guidance on FedRAMP. However, we believe that OMB can and should hold agencies accountable for complying with its policies. By implementing this recommendation, OMB could substantially improve participation in the FedRAMP program, which is intended to standardize security requirements for federal agencies' authorizations of cloud services. We will update the status of this recommendation when OMB provides information on its corrective actions.

Recommendation: The Administrator of GSA should direct the Director of FedRAMP to clarify guidance to agencies and cloud service providers on program requirements and responsibilities. (Recommendation 2)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: As of September 2020, GSA has not provided evidence to close this recommendation. We will continue to monitor the agency's progress and update the recommendation's status when GSA provides its corrective actions.

Recommendation: The Administrator of GSA should direct the Director of FedRAMP to improve the program's continuous monitoring process by allowing more automated capabilities, including for agencies to review documentation. (Recommendation 3)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: As of September 2020, GSA has not provided evidence to close this recommendation. We will continue to monitor the agency's progress and update the recommendation's status when GSA provides its corrective actions.

Recommendation: The Administrator of GSA should update security plans for selected systems to include the description of security controls and reviews and approvals plan. (Recommendation 4)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: As of September 2020, GSA has not provided evidence to close this recommendation. We will continue to monitor the agency's progress and update the recommendation's status when GSA provides its corrective actions.

Recommendation: The Administrator of GSA should update the security assessment report for the selected system to identify the summarized results of control effectiveness tests. (Recommendation 5)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: As of September 2020, GSA has not provided evidence to close this recommendation. We will continue to monitor the agency's progress and update the recommendation's status when GSA provides its corrective actions.

Recommendation: The Administrator of GSA should update the list of corrective actions for selected systems to identify the responsible office and estimated funding required and anticipated source of funding. (Recommendation 6)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: As of September 2020, GSA has not provided evidence to close this recommendation. We will continue to monitor the agency's progress and update the recommendation's status when GSA provides its corrective actions.

Recommendation: The Administrator of GSA should develop guidance requiring that cloud service authorization letters be provided to the FedRAMP program management office. (Recommendation 7)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: As of September 2020, GSA has not provided evidence to close this recommendation. We will continue to monitor the agency's progress and update the recommendation's status when GSA provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Director of CDC to update the security plan for the selected system to identify the authorization boundary, the system operational environment and connections, a description of security controls, and the individual reviewing and approving the plan and date of approval. (Recommendation 8)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, CDC stated it has taken actions to address our recommendations, but we have not received evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when CDC provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Director of CDC to update the security assessment report for the selected system to identify the summarized results of control effectiveness tests. (Recommendation 9)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, CDC stated it has taken actions to address our recommendations, but we have not received evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when CDC provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Director of CDC to update the list of corrective actions for the selected system to identify the specific weaknesses, funding source, changes to milestones and completion dates, identified source of weaknesses, and status of corrective actions. (Recommendation 10)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, CDC stated it has taken actions to address our recommendations, but we have not received evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status once CDC provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Administrator of CMS to update the system security plans for selected systems to identify a description of security controls. (Recommendation 11)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, HHS stated CMS took actions to close this recommendation, but CMS has not yet provided evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when CMS provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Administrator of CMS to update the security assessment report for selected system to identify the summarized results of control effectiveness tests. (Recommendation 12)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, HHS stated CMS took actions to close this recommendation, but CMS has not yet provided evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when CMS provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Administrator of CMS to update and document the CMS remedial action plan for the selected system to identify the anticipated source of funding. (Recommendation 13)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, HHS stated CMS took actions to close this recommendation, but CMS has not yet provided evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when CMS provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Administrator of CMS to prepare letters authorizing the use of cloud services for the selected systems and submit the letters to the FedRAMP program management office. (Recommendation 14)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, HHS stated CMS took actions to close this recommendation, but CMS has not yet provided evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when CMS provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Director of NIH to update security plans for selected systems to identify the authorization boundary, system operation in terms of mission and business processes, operational environment and connections, and a description of security controls. (Recommendation 15)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, NIH stated it is taking actions to address this recommendation, but the agency did not provide evidence of its corrective actions. NIH stated it will provide an update in December 2020. We will continue to monitor the agency's progress and update the recommendation's status when NIH provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Director of NIH to update the security assessment report for selected systems to identify summarized results of control effectiveness tests. (Recommendation 16)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, NIH stated it is taking actions to address this recommendation, but the agency did not provide evidence of its corrective actions. NIH stated it will provide an update in December 2020. We will continue to monitor the agency's progress and update the recommendation's status when NIH provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Director of NIH to update the NIH list of corrective actions for selected systems to identify estimated funding and anticipated source of funding, key milestones with completion dates, and changes to milestones and completion dates. (Recommendation 17)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, NIH stated it is taking actions to address this recommendation, but the agency did not provide evidence of its corrective actions. NIH stated it will provide an update in December 2020. We will continue to monitor the agency's progress and update the recommendation's status when NIH provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Director of NIH to submit the division's letters authorizing the use of cloud services for the selected systems to the FedRAMP program management office. (Recommendation 18)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, NIH stated it is taking actions to address this recommendation, but the agency did not provide evidence of its corrective actions. NIH stated it will provide an update in December 2020. We will continue to monitor the agency's progress and update the recommendation's status when NIH provides its corrective actions.

Recommendation: The Administrator of EPA should update security plan for the selected operational system to identify a description of security controls, and the individual reviewing and approving the plan and date of approval. (Recommendation 19)

Agency: Environmental Protection Agency
Status: Open

Comments: In June 2020, EPA stated it is taking actions to address this recommendation, but the agency did not provide evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when EPA provides its corrective actions.

Recommendation: The Administrator of EPA should update the security assessment report for the selected operational system to identify the summarized results of control effectiveness tests. (Recommendation 20)

Agency: Environmental Protection Agency
Status: Open

Comments: EPA did not concur with this recommendation and as of September 2020, the agency has not provided any evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when EPA provides its corrective actions.

Recommendation: The Administrator of EPA should update the list of corrective actions for the selected operational system to identify the specific weakness, estimated funding and anticipated source of funding, key remediation milestones with completion dates, changes to milestones and completion dates, and source of the weaknesses. (Recommendation 21)

Agency: Environmental Protection Agency
Status: Open

Comments: In June 2020, EPA stated it is taking action to address this recommendation, but the agency did not provide evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when EPA provides its corrective actions.

Recommendation: The Administrator of EPA should prepare the letter authorizing the use of cloud service for the selected operational system and submit the letter to the FedRAMP program management office. (Recommendation 22)

Agency: Environmental Protection Agency
Status: Open

Comments: EPA did not concur with this recommendation and as of September 2020, the agency has not provided any evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when EPA provides its corrective actions.

Recommendation: The Administrator of EPA should develop guidance requiring that cloud service authorization letter be provided to the FedRAMP program management office. (Recommendation 23)

Agency: Environmental Protection Agency
Status: Open

Comments: EPA did not concur with this recommendation and as of September 2020, the agency has not provided any additional evidence. We will continue to monitor the agency's progress and update the recommendation's status when EPA provides its corrective actions.

Recommendation: The Administrator of the General Services Administration (GSA), in coordination with the Director of the Office of Management and Budget, should ensure that the average cost per square foot performance measure for GSA-managed space is calculated using actual cost information. (Recommendation 1)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: GSA concurred with this recommendation and has developed an action plan to implement it. In January 2020, GSA officials told us that GSA will change the method for calculating the average cost per square foot performance measure by now using the actual rent agencies paid to GSA in the calculation. GSA officials also stated that GSA will post this information annually to performance.gov. We will continue to monitor GSA's implementation of these efforts.

Recommendation: The Chief Executive Officer of CNCS should develop an approach to ensure that all relevant participants are involved in the agency-wide process for prioritizing evidence needs. (Recommendation 1)

Agency: Corporation for National and Community Service
Status: Open

Comments: In comments on a draft of this report, the Corporation for National and Community Service (CNCS) neither agreed nor disagreed with this recommendation. Subsequently, in a June 2020 letter, CNCS stated that it agreed with our recommendation and described planned actions to strengthen its agency-wide evidence prioritization process. Among these planned actions were proposed changes to CNCS's approach for involving key participants from across the agency in the process. However, as of October 2020, CNCS had not yet provided us with documentation that would allow us to (1) assess the extent to which they address our recommendation and (2) confirm that these proposed changes were approved. We will continue to monitor CNCS's actions to address this recommendation.

Recommendation: The Chief Executive Officer of CNCS should define roles and responsibilities for all relevant participants involved in the agency-wide process for prioritizing evidence needs. (Recommendation 2)

Agency: Corporation for National and Community Service
Status: Open

Comments: In comments on a draft of this report, the Corporation for National and Community Service (CNCS) neither agreed nor disagreed with this recommendation. Subsequently, in a June 2020 letter, CNCS stated that it agreed with our recommendation and described planned actions to strengthen its agency-wide evidence prioritization process. Among these planned actions were workforce planning and hiring based on the knowledge, skills, and abilities needed for CNCS to address its evidence priorities. The letter stated that once those actions were completed, CNCS would revisit the roles and responsibilities of participants involved in the agency's evidence-building activities. We will continue to monitor CNCS's actions to address this recommendation.

Recommendation: The Chief Executive Officer of CNCS should revise written guidance for the agency-wide process for prioritizing evidence needs to ensure it identifies all relevant participants and their respective roles and responsibilities. (Recommendation 3)

Agency: Corporation for National and Community Service
Status: Open

Comments: In comments on a draft of this report, the Corporation for National and Community Service (CNCS) neither agreed nor disagreed with this recommendation. Subsequently, in a June 2020 letter, CNCS stated that it agreed with our recommendations and described planned actions to strengthen its agency-wide evidence prioritization process. However, as of October 2020, CNCS had not yet provided us with documentation that would allow us to (1) confirm that these proposed changes were approved and (2) assess the extent to which written guidance for the revised process addresses our recommendation. We will continue to monitor CNCS's actions to address this recommendation.

Recommendation: The Secretary of Labor should develop an approach to ensure that all relevant participants are involved in the department-wide process for prioritizing evidence needs. (Recommendation 6)

Agency: Department of Labor
Status: Open

Comments: In a November 2019 letter providing comments on a draft of this report, the Department of Labor (DOL) agreed with this recommendation. The letter further described actions DOL planned to take to address it. DOL stated that in fiscal year 2020 it would update its written guidance to formalize the involvement of relevant participants in department-wide evidence-building activities. However, as of October 2020, DOL had not yet provided us with documentation that would allow us to assess the extent to which its updated guidance addresses our recommendation. We will continue to monitor DOL's actions to address this recommendation.

Recommendation: The Secretary of Labor should revise written guidance for the department-wide process for prioritizing evidence needs to ensure it identifies all relevant participants and their respective roles and responsibilities. (Recommendation 7)

Agency: Department of Labor
Status: Open

Comments: In a November 2019 letter providing comments on a draft of this report, the Department of Labor (DOL) agreed with this recommendation. The letter further described actions DOL planned to take to address it. DOL stated that in fiscal year 2020 it would update its written guidance to formalize the involvement of relevant participants in department-wide evidence-building activities. However, as of October 2020, DOL had not yet provided us with documentation that would allow us to assess the extent to which its updated guidance addresses our recommendation. We will continue to monitor DOL's actions to address this recommendation.

Recommendation: The Secretary of Defense should take steps to ensure appropriate agency-funded research data are readily findable and accessible to the public. (Recommendation 1)

Agency: Department of Defense
Status: Open

Comments: The Department of Defense partially concurred with this recommendation noting the challenge with balancing ensuring public access to research data with considerations of national security and personally identifiable information. As discussed in our report, balancing these considerations is a challenge that agency officials and stakeholders identified during our work. Accordingly, our recommendation to DOD regarding findability and accessibility of agency-funded research data was qualified to pertain to appropriate agency-funded research data--recognizing that it might not be appropriate to make certain datasets publically available because of national security or other concerns. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Education should take steps to ensure appropriate agency-funded research data are readily findable and accessible to the public. (Recommendation 2)

Agency: Department of Education
Status: Open

Comments: The Department of Education concurred with this recommendation. According to its response to our report, the Department awarded a contract to support enhancements to its Education Resources Information Center (ERIC) to link scholarly research publications supported by the Department to its publicly accessible datasets. The Department indicated it expects to complete this work by September 30, 2020. When we confirm what actions the Department has taken to implement this recommendation we will provide additional information.

Recommendation: The Director of the Agency for Healthcare Research and Quality should take steps to ensure appropriate agency-funded research data are readily findable and accessible to the public. (Recommendation 3)

Agency: Department of Health and Human Services: Public Health Service: Agency for Healthcare Research and Quality
Status: Open

Comments: The Agency for Healthcare Research and Quality concurred with this recommendation. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Commissioner of the Food and Drug Administration should take steps to ensure appropriate agency-funded research data are readily findable and accessible to the public. (Recommendation 4)

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: The Food and Drug Administration concurred with this recommendation. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Secretary of Homeland Security should take steps to ensure appropriate agency-funded research data are readily findable and accessible to the public. (Recommendation 5)

Agency: Department of Homeland Security
Status: Open

Comments: The Department of Homeland Security concurred with this recommendation and noted that it was in the process of establishing a portal on its website to increase public access to agency-funded research. The department estimated these efforts would be completed by June 30, 2020. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Secretary of Veterans Affairs should take steps to ensure appropriate agency-funded research data are readily findable and accessible to the public. (Recommendation 6)

Agency: Department of Veterans Affairs
Status: Open

Comments: The Department of Veterans Affairs concurred with this recommendation but indicated in its comments on the report that had already taken steps to implement it. As discussed in the report, the department's efforts to ensure research data availability pertained to a portion of the agency's federally-funded research data. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Director of the National Science Foundation should fully implement plans to ensure appropriate agency-funded research data are readily findable and accessible to the public. (Recommendation 7)

Agency: National Science Foundation
Status: Open

Comments: NSF concurred with this recommendation. According to its response to our report, NSF is expanding its public access repository to include metadata records about data that support publications resulting from NSF-funded research. NSF's response stated that, by storing metadata records for supporting datasets alongside metadata records for publications, the public will be able to more easily find and access appropriate agency funded research data. We will provide an update when we obtain additional information about the status of implementing this recommendation.

Recommendation: The Secretary of Defense should complete development of data management plan requirements for extramural researchers. (Recommendation 8)

Agency: Department of Defense
Status: Open

Comments: The Department of Defense concurred with this recommendation noting planned steps to complete development of data management plan requirements. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the Agency for Healthcare Research and Quality should complete development of data management plan requirements. (Recommendation 9)

Agency: Department of Health and Human Services: Public Health Service: Agency for Healthcare Research and Quality
Status: Open

Comments: The Agency for Healthcare Research and Quality concurred with this recommendation. When we confirm what actions the agency has taken to implement the recommendation we will provide updated information.

Recommendation: The Secretary of Homeland Security should complete development of data management plan requirements. (Recommendation 10)

Agency: Department of Homeland Security
Status: Open

Comments: The Department of Homeland Security concurred with this recommendation, stating that it would develop a departmentwide management directive for research and development data as well as data management plan guidance and a template to document requirements. The department estimated that these efforts would be completed by June 30, 2020. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The U.S. Agency for International Development Administrator should complete development of data management plan requirements for extramural researchers. (Recommendation 11)

Agency: United States Agency for International Development
Status: Open

Comments: The U.S. Agency for International Development agreed with this recommendation. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Secretary of Agriculture should complete development of guidance and provide training to agency officials or others involved in reviewing the merits of researchers' data management plans. (Recommendation 12)

Agency: Department of Agriculture
Status: Open

Comments: The U.S. Department of Agriculture agreed with the findings of our report. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The U.S. Agency for International Development Administrator should complete development of and provide training for agency officials or others involved in reviewing the merits of researchers' data management plans. (Recommendation 13)

Agency: United States Agency for International Development
Status: Open

Comments: The U.S. Agency for International Development agreed with this recommendation. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Commissioner of the Food and Drug Administration should evaluate training needs for agency officials or others involved in reviewing the merits of researchers' data management plans and, if additional training is found to be warranted, develop and provide such training. (Recommendation 14)

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: The Food and Drug Administration concurred with this recommendation. When we confirm what actions the agency has taken to implement the recommendation we will provide updated information.

Recommendation: The Secretary of Homeland Security should evaluate training needs for agency officials or others involved in reviewing the merits of researchers' data management plans and, if additional training is found to be warranted, develop and provide such training. (Recommendation 15)

Agency: Department of Homeland Security
Status: Open

Comments: The Department of Homeland Security concurred with this recommendation, and indicated it would evaluate training needs for data management plan reviews and develop plans to fulfill any additional training needs identified. The department estimated these efforts would be completed by September 30, 2020. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Secretary of Veterans Affairs should evaluate training needs for agency officials or others involved in reviewing the merits of researchers' data management plans and, if additional training is found to be warranted, develop and provide such training. (Recommendation 16)

Agency: Department of Veterans Affairs
Status: Open

Comments: The Department of Veterans Affairs concurred with this recommendation and identified several planned steps to identify and meet training needs for those involved in reviewing researchers' data management plans. The department estimated these efforts would be completed by September 30, 2020. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Director of the Agency for Healthcare Research and Quality should evaluate training needs for agency officials or others involved in reviewing the merits of researchers' data management plans and, if additional training is found to be warranted, develop and provide such training. (Recommendation 17)

Agency: Department of Health and Human Services: Public Health Service: Agency for Healthcare Research and Quality
Status: Open

Comments: The Agency for Healthcare Research and Quality concurred with this recommendation stating that it would assess training needs for agency officials and others involved in reviewing the merits of researchers' data management plans and would develop and provide additional training if warranted. When we confirm what actions the agency has taken to implement the recommendation we will provide updated information.

Recommendation: The Secretary of Defense should evaluate training needs for agency officials or others involved in reviewing the merits of researchers' data management plans and, if additional training is found to be warranted, develop and provide such training. (Recommendation 18)

Agency: Department of Defense
Status: Open

Comments: The Department of Defense concurred with this recommendation. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Secretary of Energy should evaluate training needs for agency officials or others involved in reviewing the merits of researchers' data management plans and, if additional training is found to be warranted, develop and provide such training. (Recommendation 19)

Agency: Department of Energy
Status: Open

Comments: The Department of Energy concurred with this recommendation and stated it would assess and develop a plan to meet the training needs of internal DOE staff and external peer reviewers of data management plans. DOE estimated these efforts would be completed by December 31, 2020. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Environmental Protection Agency Administrator should evaluate training needs for agency officials or others involved in reviewing the merits of researchers' data management plans and, if additional training is found to be warranted, develop and provide such training. (Recommendation 20)

Agency: Environmental Protection Agency
Status: Open

Comments: The Environmental Protection Agency agreed with this recommendation stating that, during fiscal year 2020, the agency will evaluate training needs for agency officials who review researchers' data management plans. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Agriculture should develop and implement a mechanism to ensure researcher compliance with the public access plan and associated requirements. (Recommendation 21)

Agency: Department of Agriculture
Status: Open

Comments: The U.S. Department of Agriculture agreed with the findings of our report. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should develop and implement a mechanism to ensure researcher compliance with the public access plan and associated requirements. (Recommendation 22)

Agency: Department of Defense
Status: Open

Comments: The Department of Defense concurred with this recommendation When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the Agency for Healthcare Research and Quality should develop and implement a mechanism to ensure researcher compliance with the public access plan and associated requirements.(Recommendation 23)

Agency: Department of Health and Human Services: Public Health Service: Agency for Healthcare Research and Quality
Status: Open

Comments: The Agency for Healthcare Research and Quality concurred with this recommendation. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Commissioner of the Food and Drug Administration should develop and implement a mechanism to ensure researcher compliance with the public access plan and associated requirements. (Recommendation 24)

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: The Food and Drug Administration concurred with this recommendation. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Director of the National Institutes of Health should fully develop and implement a mechanism to ensure researcher compliance with the public access plan and associated requirements. (Recommendation 25)

Agency: Department of Health and Human Services: Public Health Service: National Institutes of Health
Status: Open

Comments: The National Institutes of Health concurred with this recommendation but stated that the agency already had mechanisms in place to ensure compliance with public access plan and associated requirements for publications and data. As discussed in the report, we believe our recommendation, as worded, appropriately reflected the extent to which the agency had implemented researcher compliance mechanisms at the time of issuance of our report. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Secretary of Homeland Security should develop and implement a mechanism to ensure researcher compliance with the public access plan and associated requirements. (Recommendation 26)

Agency: Department of Homeland Security
Status: Open

Comments: The Department of Homeland Security concurred with this recommendation and stated it would develop a mechanism to ensure researcher compliance with the department's public access plan and data management plan requirements. The department estimated these efforts would be completed by September 30, 2020. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The National Oceanic and Atmospheric Administration Administrator should fully develop and implement a mechanism to ensure researcher compliance with the public access plan and associated requirements. (Recommendation 27)

Agency: Department of Commerce: National Oceanic and Atmospheric Administration
Status: Open

Comments: The Department of Commerce agreed with this recommendation and the National Oceanic and Atmospheric Administration indicated it was pursuing multiple mechanisms to implement it. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Energy should fully develop and implement a mechanism to ensure researcher compliance with the public access plan and associated requirements. (Recommendation 28)

Agency: Department of Energy
Status: Open

Comments: The Department of Energy concurred with this recommendation stating that it would develop a compliance mechanism to identify researchers receiving funding from DOE financial assistance awards who are not compliant with DOE's public access plan for publications. DOE estimated these efforts would be completed by December 31, 2020. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Veterans Affairs should fully develop and implement a mechanism to ensure researcher compliance with the public access plan and associated requirements. (Recommendation 29)

Agency: Department of Veterans Affairs
Status: Open

Comments: The Department of Veterans Affairs concurred with this recommendation but indicated in its comments on the report that had already taken steps to implement it. As discussed in the report, the department's public access compliance mechanism covered a portion of the agency's federally-funded research data.. When we confirm what actions the agency has taken in response to the recommendation, we will provide updated information.

Recommendation: The Secretary of Transportation should fully develop and implement a mechanism to ensure researcher compliance with the public access plan and associated requirements. (Recommendation 30)

Agency: Department of Transportation
Status: Open

Comments: The Department of Transportation concurred with this recommendation. According to its response to our report, the Department will build upon existing compliance mechanisms to ensure researcher compliance with its public access plan and associated requirements. As part of this process, the Department reported that it plans to update its public access plan, and expects to complete these actions by December 31, 2020. When we confirm what actions the Department has taken to implement this recommendation we will provide additional information.

Recommendation: The National Institute of Standards and Technology Director should fully develop and implement a mechanism to ensure researcher compliance with the public access plan and associated requirements. (Recommendation 31)

Agency: Department of Commerce: National Institute of Standards and Technology
Status: Open

Comments: The Department of Commerce agreed with this recommendation and the National Institute of Standards and Technology identified several planned steps to implement it with full completion anticipated by December 31, 2020. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: As the Subcommittee on Open Science moves forward, the Office of Science and Technology Policy co-chair, in coordination with other co-chairs and participating agencies, should take steps to fully implement leading practices that enhance and sustain collaboration. (Recommendation 32)

Agency: Executive Office of the President: Office of Science and Technology Policy
Status: Open

Comments: OSTP disagreed with GAO's November 2019 recommendation, stating that the subcommittee had already taken steps to implement the leading practices GAO identified. However, OSTP officials did not provide documentation of these efforts and GAO continued to believe the recommendation was warranted. In March 2020, OSTP provided information on steps the subcommittee has taken to address issues associated with public access to federally funded research results, including certain areas GAO identified as presenting challenges to public access plan implementation in the November 2019 report. GAO will collect and evaluate additional information to determine the extent to which these steps incorporate leading practices for interagency collaboration GAO has identified. By taking steps to fully implement the relevant leading practices we have identified, the subcommittee and its member agencies could better marshal their collective efforts to address common public access plan implementation challenges that agency officials and stakeholders identified.

Recommendation: As the Subcommittee on Open Science moves forward, the Department of Defense co-chair, in coordination with other co-chairs and participating agencies, should take steps to fully implement leading practices that enhance and sustain collaboration. (Recommendation 33)

Agency: Department of Defense
Status: Open

Comments: DOD concurred with GAO's November 2019 recommendation, noting that DOD participates in subcommittee initiatives, including a working group on disclosure risk management, which is a topic of great importance to DOD. In March 2020, the Office of Science and Technology Policy provided information on steps the subcommittee has taken to address issues associated with public access to federally funded research results, including certain areas GAO identified as presenting challenges to public access plan implementation in the November 2019 report. GAO will collect and evaluate additional information to determine the extent to which these steps incorporate leading practices for interagency collaboration GAO has identified. By taking steps to fully implement the relevant leading practices we have identified, the subcommittee and its member agencies could better marshal their collective efforts to address common public access plan implementation challenges that agency officials and stakeholders identified.

Recommendation: As the Subcommittee on Open Science moves forward, the Department of Energy co-chair, in coordination with other co-chairs and participating agencies, should take steps to fully implement leading practices that enhance and sustain collaboration. (Recommendation 34)

Agency: Department of Energy
Status: Open

Comments: DOE concurred with GAO's November 2019 recommendation. DOE noted that, as a co-chair of the subcommittee, it is actively identifying areas of collaboration across agencies in implementing open science practices. In March 2020, the Office of Science and Technology Policy provided information on steps the subcommittee has taken to address issues associated with public access to federally funded research results, including certain areas GAO identified as presenting challenges to public access plan implementation in the November 2019 report. GAO will collect and evaluate additional information to determine the extent to which these steps incorporate leading practices for interagency collaboration GAO has identified. By taking steps to fully implement the relevant leading practices we have identified, the subcommittee and its member agencies could better marshal their collective efforts to address common public access plan implementation challenges that agency officials and stakeholders identified.

Recommendation: As the Subcommittee on Open Science moves forward, the National Institutes of Health co-chair, in coordination with other co-chairs and participating agencies, should take steps to fully implement leading practices that enhance and sustain collaboration. (Recommendation 35)

Agency: Department of Health and Human Services: Public Health Service: National Institutes of Health
Status: Open

Comments: NIH concurred with GAO's November 2019 recommendation. NIH stated that the subcommittee and its working groups are actively coordinating and building consensus on issues and processes to implement leading practices that enhance and sustain collaboration across federal agencies. In March 2020, the Office of Science and Technology Policy provided information on steps the subcommittee has taken to address issues associated with public access to federally funded research results, including certain areas GAO identified as presenting challenges to public access plan implementation in the November 2019 report. GAO will collect and evaluate additional information to determine the extent to which these steps incorporate leading practices for interagency collaboration GAO has identified. By taking steps to fully implement the relevant leading practices we have identified, the subcommittee and its member agencies could better marshal their collective efforts to address common public access plan implementation challenges that agency officials and stakeholders identified.

Recommendation: As the Subcommittee on Open Science moves forward, the National Oceanic and Atmospheric Administration co-chair, in coordination with other co-chairs and participating agencies, should take steps to fully implement leading practices that enhance and sustain collaboration. (Recommendation 36)

Agency: Department of Commerce: National Oceanic and Atmospheric Administration
Status: Open

Comments: NOAA concurred with GAO's November 2019 recommendation, noting that NOAA would work with the subcommittee to identify more opportunities for collaboration to promote access to research results. In March 2020, the Office of Science and Technology Policy provided information on steps the subcommittee has taken to address issues associated with public access to federally funded research results, including certain areas GAO identified as presenting challenges to public access plan implementation in the November 2019 report. GAO will collect and evaluate additional information to determine the extent to which these steps incorporate leading practices for interagency collaboration GAO has identified. By taking steps to fully implement the relevant leading practices we have identified, the subcommittee and its member agencies could better marshal their collective efforts to address common public access plan implementation challenges that agency officials and stakeholders identified.

Recommendation: As the Subcommittee on Open Science moves forward, the National Science Foundation co-chair, in coordination with other co-chairs and participating agencies, should take steps to fully implement leading practices that enhance and sustain collaboration. (Recommendation 37)

Agency: National Science Foundation
Status: Open

Comments: The National Science Foundation concurred with GAO's November 2019 recommendation. In March 2020, the Office of Science and Technology Policy provided information on steps the subcommittee has taken to address issues associated with public access to federally funded research results, including certain areas GAO identified as presenting challenges to public access plan implementation in the November 2019 report. GAO will collect and evaluate additional information to determine the extent to which these steps incorporate leading practices for interagency collaboration GAO has identified. By taking steps to fully implement the relevant leading practices we have identified, the subcommittee and its member agencies could better marshal their collective efforts to address common public access plan implementation challenges that agency officials and stakeholders identified.

Recommendation: The Director of the Office of Financial Assistance should review and enhance guidance for the Microloan Program to ensure definitions of data collected, such as income, are clear and instructions are comprehensive for data needed, such as for borrower business outcomes and technical assistance. (Recommendation 1)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Directors of the Office of Financial Assistance and Office of Program Performance, Analysis, and Evaluation should develop a performance target to assess the Microloan Program's progress in achieving its statutory purpose of assisting women, low-income, veteran, and minority entrepreneurs. (Recommendation 2)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Directors of the Office of Financial Assistance and Office of Program Performance, Analysis, and Evaluation should ensure that appropriate advance planning occurs during the development of the new Microloan Program data reporting system by involving relevant offices within SBA in system design and considering data needed to assess program performance. (Recommendation 3)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The SBA Administrator should explore opportunities for additional interagency collaboration and information sharing with other federal agencies that engage in microlending activities, such as Treasury and USDA, and take steps to implement new collaborative efforts as warranted. (Recommendation 4)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the Office of Financial Assistance should examine ways to incorporate public reporting of additional Microloan Program information into the design of the new data reporting system. (Recommendation 5)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Transportation should direct the Administrator of FTA to identify and develop controls, such as methods to more easily identify transit expenses within applications submitted by larger entities, such as a city, county, or state government, to address the risk of duplicate funding. (Recommendation 1)

Agency: Department of Transportation
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Homeland Security should direct the Administrator of FEMA to identify and develop controls, such as methods to more easily identify transit expenses within applications submitted by larger entities such as a city, county, or state government, to address the risk of duplicate funding. (Recommendation 2)

Agency: Department of Homeland Security
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Agriculture should ensure that the agency fully implements each of the eight key IT workforce planning activities it did not fully implement. (Recommendation 1)

Agency: Department of Agriculture
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Education should ensure that the agency fully implements each of the seven key IT workforce planning activities it did not fully implement. (Recommendation 2)

Agency: Department of Education
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Energy should ensure that the agency fully implements each of the eight key IT workforce planning activities it did not fully implement. (Recommendation 3)

Agency: Department of Energy
Status: Open

Comments: In July 2020, the department reported actions it had taken to fully implement the activities associated with assessing competencies and needs regularly; assessing gaps in competencies and staffing; monitoring the agency's progress in addressing competency and staffing gaps; and reporting to agency leadership on progress in addressing competency and staffing gaps. The department also reported actions it had taken to address the remaining four activities and provided estimated time frames for fully implementing them. As of August 2020, we were following up with the department to obtain supporting documentation for the activities it claimed it had fully implemented and status updates for the remaining activities.

Recommendation: The Secretary of Homeland Security should ensure that the agency fully implements each of the eight key IT workforce planning activities it did not fully implement. (Recommendation 4)

Agency: Department of Homeland Security
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Housing and Urban Development should ensure that the agency fully implements each of the seven key IT workforce planning activities it did not fully implement. (Recommendation 5)

Agency: Department of Housing and Urban Development
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Interior should ensure that the agency fully implements each of the eight key IT workforce planning activities it did not fully implement. (Recommendation 6)

Agency: Department of the Interior
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Attorney General should ensure that the agency fully implements each of the eight key IT workforce planning activities it did not fully implement. (Recommendation 7)

Agency: Department of Justice
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Labor should ensure that the agency fully implements each of the eight key IT workforce planning activities it did not fully implement. (Recommendation 8)

Agency: Department of Labor
Status: Open

Comments: In December 2019, Labor officials provided additional documentation on actions taken to address the recommendation. We plan to review the documentation, and when we confirm what actions the agency has taken, we will provide updated information.

Recommendation: The Secretary of State should ensure that the agency fully implements each of the seven key IT workforce planning activities it did not fully implement. (Recommendation 9)

Agency: Department of State
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency fully implements each of the five key IT workforce planning activities it did not fully implement. (Recommendation 10)

Agency: Department of Veterans Affairs
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of the Environmental Protection Agency should ensure that the agency fully implements each of the eight key IT workforce planning activities it did not fully implement. (Recommendation 11)

Agency: Environmental Protection Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of the General Services Administration should ensure that the agency fully implements each of the seven key IT workforce planning activities it did not fully implement. (Recommendation 12)

Agency: General Services Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the National Science Foundation should ensure that the agency fully implements each of the eight key IT workforce planning activities it did not fully implement. (Recommendation 13)

Agency: National Science Foundation
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Chairman of the Nuclear Regulatory Commission should ensure that the agency fully implements each of the seven key IT workforce planning activities it did not fully implement. (Recommendation 14)

Agency: Nuclear Regulatory Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the Office of Personnel Management should ensure that the agency fully implements each of the eight key IT workforce planning activities it did not fully implement. (Recommendation 15)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: In December 2019, OPM stated that it had partnered with the General Services Administration's IT Modernization Center of Excellence to assess the current state of its IT workforce planning activities, but had not yet implemented any of the eight key planning activities we recommended. We will continue to monitor OPM's efforts to implement the recommendation.

Recommendation: The Administrator of the Small Business Administration should ensure that the agency fully implements each of the seven key IT workforce planning activities it did not fully implement. (Recommendation 16)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of the Social Security Administration should ensure that the agency fully implements each of the five key IT workforce planning activities it did not fully implement. (Recommendation 17)

Agency: Social Security Administration
Status: Open

Comments: In November 2019, Social Security Administration officials provided the agency's recently issued IT workforce strategy for fiscal year 2019 to fiscal year 2022. We plan to review the strategy, and when we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of the U.S. Agency for International Development should ensure that the agency fully implements each of the seven key IT workforce planning activities it did not fully implement. (Recommendation 18)

Agency: United States Agency for International Development
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Executive Director of the Permitting Council should incorporate selected best practices we have identified (maintaining the baseline schedule and conducting a risk analysis) into the Permitting Council's process for developing performance schedules for the infrastructure sectors covered under FAST-41. (Recommendation 1)

Agency: Federal Permitting Improvement Steering Council
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of FEMA should develop and provide clear written information in the form of policy, guidance, or regulations, as appropriate, to COR3 and PREPA that clarifies how FEMA will implement new authorities for the electricity grid recovery in Puerto Rico, including guidance on industry standards and defining resilience. (Recommendation 1)

Agency: Federal Emergency Management Agency
Status: Open

Comments: Since GAO's October 2019 report, FEMA updated its guidance and has provided information to local entities on project eligibility and the industry standards it would accept for restoring the grid. In addition, in January 2020, FEMA provided training to FEMA regional officials and local entities on how to implement this guidance. Despite these efforts, uncertainty remains regarding the extent to which local entities in Puerto Rico have sufficient information to implement projects to promote grid resilience. This is in part due to challenges such as the need for written guidance on how project development will proceed after the fixed-cost estimate is finalized. GAO will continue to monitor FEMA progress towards implementation of this recommendation.

Recommendation: The Secretary of HUD should establish time frames and a plan for publication of the grant process and requirements for CDBG-DR funding available for improvements to Puerto Rico's electricity grid. (Recommendation 2)

Agency: Department of Housing and Urban Development
Status: Open

Comments: As of August 2020, HUD had not published a federal notice outlining the grant process and requirements for CDBG-DR funding available for improvements to Puerto Rico's electricity grid, nor has it established time frames and a plan for issuing this notice. We continue to believe that the action we recommended is needed and will monitor HUD's efforts as part of our regular recommendation follow-up and additional work examining federal support to improve grid resilience in Puerto Rico. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of FEMA, in coordination with DOE, HUD, and other federal and local entities, should establish a mechanism, or take steps to improve existing mechanisms, for coordination among the multiple local and federal entities involved in grid recovery that facilitates decision-making and information sharing among local and federal agencies. (Recommendation 3)

Agency: Federal Emergency Management Agency
Status: Open

Comments: FEMA and DOE have enhanced coordination efforts between their respective agencies and with local entities involved in long-term grid recovery in Puerto Rico via the Technical Coordination Team but until the team's fiscal working group demonstrates how it will help coordinate different potential funding sources, the extent to which these efforts will enhance progress toward grid recovery is uncertain. FEMA can demonstrate this, in part, by providing documentation of efforts to coordinate funding for long-term recovery projects. GAO will continue to monitor agency efforts to support grid recovery in Puerto Rico.

Recommendation: The Secretary of the Army should update Army manpower guidance, or other guidance as appropriate, to ensure that all missions conducted by EOD forces, including DSCA missions, are considered in determining the required number of EOD forces. (Recommendation 1)

Agency: Department of Defense
Status: Open

Comments: As of July 15, 2020, the Department of the Army has neither concurred nor non-concurred with this recommendation.

Recommendation: The Secretary of the Air Force should update Air Force manpower guidance, or other guidance as appropriate, to ensure that all missions conducted by EOD forces, including DSCA missions, are considered in determining the required number of EOD forces. (Recommendation 2)

Agency: Department of Defense
Status: Open

Comments: As of July 15, 2020, the Department of the Air Force has neither concurred nor non-concurred with this recommendation.

Recommendation: The Secretary of the Navy should update Navy and Marine Corps manpower guidance, or other guidance as appropriate, to ensure that all missions conducted by EOD forces, including DSCA missions, are considered in determining the required number of EOD forces. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: As of July 15, 2020, the Department of the Navy has neither concurred nor non-concurred with this recommendation.

Recommendation: The Secretary of Defense should ensure that the Chairman of the Joint Chiefs of Staff, in collaboration with the combatant commands, incorporate into the appropriate guidance a requirement that the military services notify the Joint Staff and the affected combatant commands when the execution of VIP support missions negatively affects the preparedness of EOD units for combat-related missions. (Recommendation 4)

Agency: Department of Defense
Status: Open

Comments: As of July 15, 2020, the Department of Defense has neither concurred nor non-concurred with this recommendation.

Recommendation: The Secretary of State, working with the Administrator of the U.S. Agency for International Development, should collaborate with the Departments of Defense and Agriculture and other Departments as necessary, to develop a comprehensive approach to the monitoring and evaluation of projects that directly support the objectives of prosperity, governance, and security, and incorporate this approach into the Strategy monitoring and evaluation plan.

Agency: Department of State
Status: Open

Comments: State did not concur with the recommendation, indicating that it continues to collaborate with agencies regarding U.S. government activities in El Salvador, Guatemala, and Honduras. However, in May 2020, State noted that, to the extent possible, it would seek to include agencies, such as the Departments of Defense and Agriculture, into the Progress Report for the U.S. Strategy for Central America's Plan for Monitoring and Evaluation. When we confirm what actions State has taken in response to this recommendation, we will provide updated information.

Recommendation: The NOAA Administrator, in coordination with interagency committee member agencies, should establish a time frame for documenting the committee's membership process. (Recommendation 1)

Agency: Department of Commerce: National Oceanic and Atmospheric Administration
Status: Open

Comments: In February 2020, NOAA stated that its Administrator, in consultation with interagency committee member agencies, will determine criteria and other factors for evaluating federal agency interest and will formalize and document the interagency committee's membership process. NOAA anticipates documenting the process in the committee's charter by August 31, 2020.

Recommendation: The NOAA Administrator, in coordination with interagency committee member agencies, should clarify what is meant by "senior official" in the Marine Debris Act, such as through revisions to its charter. (Recommendation 2)

Agency: Department of Commerce: National Oceanic and Atmospheric Administration
Status: Open

Comments: In February 2020, NOAA stated that the agency, in coordination with interagency committee member agencies, will define the term "senior official" so that it can be consistently applied across all member agencies. NOAA stated it will consider seniority requirements of similar advisory committees and the ability to make decisions on behalf of an agency, among other factors, when developing the definition. NOAA plans to include the definition in the committee's charter by August 31, 2020.

Recommendation: The chair of the interagency committee, in coordination with member agencies, should develop and implement a process to analyze the effectiveness of the interagency committee's recommendations and strategies, and include the results in its biennial reports. (Recommendation 3)

Agency: Interagency Marine Debris Coordinating Committee
Status: Open

Comments: In February 2020, NOAA stated the agency will work with interagency committee member agencies to review and update the committee's recommendations. As part of this process, the committee will develop metrics to analyze the effectiveness of the committee's recommendations and strategies. NOAA stated that the recommendations and assessment of effectiveness will be included in the committee's 2018-2019 biennial report, which NOAA expects to publish by December 31, 2020.

Recommendation: The chair of the interagency committee, in coordination with member agencies, should develop a process to identify recommendations for priority funding needs to address marine debris, and include such recommendations in its biennial reports. (Recommendation 4)

Agency: Interagency Marine Debris Coordinating Committee
Status: Open

Comments: In February 2020, NOAA stated that it will, in coordination with interagency committee member agencies, develop a process to identify priority funding needs which can be reflected in each agency's respective budgeting process and shared in the committee's biennial reports. NOAA expects to publish the committee's 2018-2019 biennial report by December 31, 2020.

Recommendation: The Secretary of Commerce should update the department's environmental justice strategic plan. (Recommendation 1)

Agency: Department of Commerce
Status: Open

Comments: The department did not provide comments on our report or recommendation. We will continue to review the department's actions and provide updated information.

Recommendation: The Assistant Secretary of Defense for Sustainment should update the department's environmental justice strategic plan. (Recommendation 2)

Agency: Department of Defense: Office of the Secretary of Defense: Office of the Under Secretary of Defense for Acquisition and Sustainment: Office of the Assistant Secretary of Defense for Sustainment
Status: Open

Comments: In its comments on our report, the department agreed with this recommendation. We will continue to review the department's actions and provide updated information.

Recommendation: The Secretary of Education should update the department's environmental justice strategic plan. (Recommendation 3)

Agency: Department of Education
Status: Open

Comments: In its comments on our report, Education stated that we did not sufficiently account for the limitations on its legal authority to carry out environmental justice activities. Education also stated that it does not believe this is the most appropriate course of action for the department or an efficient use of resources. We believe that Education can develop a strategic plan within its existing authorities. We will continue to review the department's actions to implement the recommendation.

Recommendation: The Secretary of Homeland Security should update the department's environmental justice strategic plan. (Recommendation 4)

Agency: Department of Homeland Security
Status: Open

Comments: In comments on our report, the department agreed with this recommendation. We will continue to review the department's actions and update this information.

Recommendation: The Secretary of Housing and Urban Development should update the department's environmental justice strategic plan. (Recommendation 5)

Agency: Department of Housing and Urban Development
Status: Open

Comments: In comments on our report, the department neither agreed nor disagreed with this recommendation. We will continue to review the department's actions and update this information.

Recommendation: The Attorney General of the United States should update the department's environmental justice strategic plan. (Recommendation 6)

Agency: Department of Justice
Status: Open

Comments: In April 2020, the department agreed to review its environmental justice strategy and to revise it if needed. It also stated that as part of that review, it will consider any guidance issued by the Interagency Working Group on Environmental Justice (EJ IWG) concerning what agencies should include in environmental justice strategic plans. The department stated that it anticipated receiving such guidance by the end of 2020. We will continue to review the department's actions and update this information.

Recommendation: The Secretary of Labor should update the department's environmental justice strategic plan. (Recommendation 7)

Agency: Department of Labor
Status: Open

Comments: In November 2019, the department stated that its role is tangential to achieving environmental justice goals, but it is committed to integrating environmental justice into its responsibilities to protect workers. It stated that it has no plans at this time to update its environmental strategic plan. We agree that Labor should develop an environmental plan that contains goals consistent with its mission and authorities. We will continue to review its actions to implement our recommendation.

Recommendation: The Administrator of the Small Business Administration should complete the agency's assessment of whether to participate in the 1994 Executive Order and the 2011 Memorandum of Understanding, and, if appropriate, develop an environmental justice strategic plan. (Recommendation 8)

Agency: Small Business Administration
Status: Open

Comments: In its comments on our report, the agency agreed with our recommendation. We will continue to review the agency's actions to update its progress in implementing the recommendation.

Recommendation: The Secretary of Veterans Affairs should update the department's environmental justice strategic plan. (Recommendation 9)

Agency: Department of Veterans Affairs
Status: Open

Comments: In April 2020, the department committed to updating its environmental justice strategic plan. It said that it will update its strategic plan pending the Environmental Protection Agency's (EPA) guidance on what agencies should include in their plans. It also set a goal of completing the update within 6 months of EPA's issuance of guidance. We will continue to review the department's actions and update this information.

Recommendation: The Secretary of Agriculture should issue a progress report on the department's environmental justice efforts each year. (Recommendation 10)

Agency: Department of Agriculture
Status: Open

Comments: In comments on our report, USDA agreed with our recommendation. We will continue to review the department's actions and provide updated information.

Recommendation: The Secretary of Commerce should issue a progress report on the department's environmental justice efforts each year. (Recommendation 11)

Agency: Department of Commerce
Status: Open

Comments: The department did not provide comments on our report or recommendation. We will continue to review the department's actions and provide updated information.

Recommendation: The Assistant Secretary of Defense for Sustainment should issue a progress report on the department's environmental justice efforts each year. (Recommendation 12)

Agency: Department of Defense: Office of the Secretary of Defense: Office of the Under Secretary of Defense for Acquisition and Sustainment: Office of the Assistant Secretary of Defense for Sustainment
Status: Open

Comments: In its comments on our report, the Department of Defense (DOD) disagreed with this recommendation. First, DOD stated that it had achieved the intent of Executive Order 12898 by including environmental justice considerations in its decision-making processes, primarily by using the environmental review process. Second, the department stated that it is bound by its mission with limited opportunities to change where the department operates. DOD stated that these reasons make it a significant challenge for the department to meet our recommendation and therefore does not see a tangible benefit to additional reporting. As we stated in our report, DOD would be reporting on goals that it set within its mission and authorities. We will continue to review DOD's actions to carry out this recommendation.

Recommendation: The Secretary of Education should issue a progress report on the department's environmental justice efforts each year. (Recommendation 13)

Agency: Department of Education
Status: Open

Comments: In its comments on our report, Education stated that we did not sufficiently account for the limitations on its legal authority to carry out environmental justice activities. Education also stated that it does not believe this recommendation is the most appropriate course of action for the department or an efficient use of resources. We believe that Education can develop a strategic plan within its existing authorities, and then it should report its progress on these activities annually. We will continue to review the department's actions to implement the recommendation.

Recommendation: The Secretary of Health and Human Services should issue a progress report on the department's environmental justice efforts each year. (Recommendation 14)

Agency: Department of Health and Human Services
Status: Open

Comments: In comments on our report, the department agreed with this recommendation. We will continue to review the department's actions and provide updated information.

Recommendation: The Secretary of Energy should issue a progress report on the department's environmental justice efforts each year. (Recommendation 15)

Agency: Department of Energy
Status: Open

Comments: In January 2020, Department of Energy officials stated that they had issued progress reports for fiscal years 2017 and 2018 and would issue progress reports annually after this point. We will review the department's reports in upcoming years to determine that it has carried out this recommendation.

Recommendation: The Secretary of Housing and Urban Development should issue a progress report on its environmental justice efforts each year. (Recommendation 16)

Agency: Department of Housing and Urban Development
Status: Open

Comments: In comments on our report, the department agreed with this recommendation. We will continue to review the department's actions and update this information.

Recommendation: The Secretary of the Interior should issue a progress report on the department's environmental justice efforts each year. (Recommendation 17)

Agency: Department of the Interior
Status: Open

Comments: In its comments on our report, the department agreed with our recommendation. We will continue to review the department's actions and update this information.

Recommendation: The Secretary of Labor should issue a progress report on the department's environmental justice efforts each year. (Recommendation 18)

Agency: Department of Labor
Status: Open

Comments: In November 2019, the department stated that its role is tangential to achieving environmental justice goals and therefore it has no real chance to update its progress reports. We agree that Labor should develop an environmental strategic plan containing goals consistent with its mission and authorities. It can develop progress reports annually related to these goals. We will continue to review its actions to implement our recommendation and update this information.

Recommendation: The Secretary of Transportation should issue a progress report on the department's environmental justice efforts each year. (Recommendation 19)

Agency: Department of Transportation
Status: Open

Comments: In February 2020, the department stated that it partially agreed with this recommendation. It stated that it would update its progress reports as needed. As we stated in our report, leading practices for performance management indicate that annual performance reporting helps an agency to keep track of and achieve its goals. We will continue to review the department's actions and update this information.

Recommendation: The Secretary of Veterans Affairs should issue a progress report on the department's environmental justice efforts each year. (Recommendation 20)

Agency: Department of Veterans Affairs
Status: Open

Comments: In April 2020, the department committed to issuing annual progress reports. The department also stated that it will use EPA or Interagency Working Group (IWG) guidance on methods agencies could use to assess progress towards their environmental justice goals. It stated that it would begin issuing progress reports following issuance of such guidance and per reporting schedule established by the Environmental Justice IWG. We will continue to review the department's actions and update this information.

Recommendation: The Administrator of EPA, as chair of the working group, should develop guidance for agencies on what they should include in their environmental justice strategic plans. (Recommendation 21)

Agency: Environmental Protection Agency
Status: Open

Comments: In its comments on our report, EPA agreed with this recommendation. We will continue to review the agency's actions and update this information.

Recommendation: The Administrator of EPA, as chair of the working group, should develop guidance or create a committee of the working group to develop guidance on methods the agencies could use to assess progress toward their environmental justice goals. (Recommendation 22)

Agency: Environmental Protection Agency
Status: Open

Comments: In its comments on our report, EPA agreed with this recommendation. We will continue to review the agency's actions to update its progress in implementing this recommendation.

Recommendation: The Administrator of EPA, as chair of the working group, and in consultation with the working group, should clearly establish, in its organizational documents, strategic goals for the federal government's efforts to carry out the 1994 Executive Order. (Recommendation 23)

Agency: Environmental Protection Agency
Status: Open

Comments: In its comments on our report, EPA disagreed with this recommendation, but also stated that it would lead efforts to update the working group's fiscal year 2016-2018 Framework for Collaboration to include guidance for strategic plans, tracking progress toward goals, and defining alignment with the executive order. We believe that if the agency carries out these actions, it will meet the intent of the recommendation. We will continue to review the agency's actions to update its progress in implementing the recommendation.

Recommendation: The Administrator of EPA, as chair of the working group, and in consultation with the other working group members, should update the 2011 Memorandum of Understanding and renew the agencies' commitments to participate in the interagency collaborative effort and the working group. (Recommendation 24)

Agency: Environmental Protection Agency
Status: Open

Comments: In its comments on our report, EPA disagreed with this recommendation and stated that it should be combined with the recommendation to update the Environmental Justice working group's strategic documents. We believe the agency misunderstood the recommendation. As we stated in the report, we believe that the MOU needs to be updated to address the matter of participation by the members who signed it but do not participate. We will continue to review the agency's actions to update its progress in implementing this recommendation.

Recommendation: The Secretary of the Army should direct the Assistant Secretary of the Army for Civil Works to develop an implementation plan that includes resource estimates to address the remaining WRRDA 2014 acceleration provisions. (Recommendation 1)

Agency: Department of Defense
Status: Open

Comments: The Department of Defense concurred with the recommendation. According to documentation provided by the agency, the Secretary of the Army will sign a memorandum by March 2020 directing the Assistant Secretary of the Army for Civil Works to develop an implementation plan to address study acceleration. Upon receipt of that memorandum, the Assistant Secretary of the Army for Civil Works will work with the Army Corps of Engineers to develop an implementation plan to address study acceleration. This implementation plan is expected to be signed by September 2020. We will continue to monitor the Corps' progress.

Recommendation: The Secretary of the Army should direct the Assistant Secretary of the Army for Civil Works to develop a plan to conduct a comprehensive evaluation of the impacts of the agency's feasibility study acceleration reforms. (Recommendation 2)

Agency: Department of Defense
Status: Open

Comments: The Department of Defense concurred with the recommendation. According to documentation provided by the agency, the Secretary of the Army will sign a memorandum by March 2020 directing the Assistant Secretary of the Army for Civil Works to conduct a comprehensive evaluation of the impacts of the agency's feasibility study acceleration reforms. Upon receipt of that memorandum, the Assistant Secretary of the Army for Civil Works will work with the Army Corps of Engineers to develop an implementation plan for this evaluation, which is expected to be signed by September 2020. We will continue to monitor the Corps' progress.

Recommendation: The Secretary of the Army should direct the Assistant Secretary of the Army for Civil Works to clarify its policy to help ensure district officials enter data on all key milestones for feasibility studies into its central data system. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: The Department of Defense concurred with the recommendation. According to documentation provided by the agency, the Secretary of the Army will sign a memorandum by March 2020 directing the Assistant Secretary of the Army for Civil Works to clarify the Army's policy on entry of key study data to include milestone dates. Upon receipt of that memorandum, the Assistant Secretary of the Army for Civil Works will work with the Army Corps of Engineers to develop an implementation plan for this effort, which is expected to be signed by September 2020. We will continue to monitor the Corps' progress.

Recommendation: The Director of OMB should expand its coordination of CyberStat review meetings for those agencies with a demonstrated need for assistance in implementing information security. (Recommendation 2)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open
Priority recommendation

Comments: In January 2020, OMB officials stated that they have incorporated agency feedback for enhancing the CyberStat program into an updated concept of operations document that is currently in draft. To consider this recommendation fully implemented, OMB needs to provide us with an updated concept of operations document for the CyberStat program, and demonstrate the expansion of CyberStat review meetings to agencies that require additional assistance due to persistent information security deficiencies. As of September 2020, OMB has not provided sufficient evidence to close this recommendation.

Recommendation: The Director of OMB should collaborate with CIGIE to ensure that the inspector general reporting metrics include the FISMA-required information security program element for system security plans. (Recommendation 3)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: As of September 2020, we were still waiting to receive OMB's 180-day letter detailing the actions it plans to take to address the recommendation.

Recommendation: The Director of OMB should, in coordination with the Secretary of Homeland Security, establish guidance or other means to facilitate the sharing of successful approaches for agencies to address challenges in the areas of (1) managing competing priorities between cybersecurity and operations, such as when operational needs appear to conflict with cybersecurity requirements; (2) implementing consistent cybersecurity risk management policies and procedures across an agency; (3) incorporating cyber risks into enterprise risk management, and (4) establishing agencies' cybersecurity risk management strategies. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: The Office of Management and Budget did not say whether or not it concurred with this recommendation. As of January 2020, we had not received information pertaining to this recommendation. Once OMB has provided information, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Agriculture should develop a cybersecurity risk management strategy that includes the key elements identified in this report. (Recommendation 2)

Agency: Department of Agriculture
Status: Open
Priority recommendation

Comments: The Department of Agriculture did not state whether or not it concurred with this recommendation. As of February 2020, the department stated that it is developing a Risk Management Framework implementation plan, which is to include a comprehensive Cybersecurity Strategy. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Agriculture should update the department's policies to require (1) the use of risk assessments to inform security control tailoring and (2) the use of risk assessments to inform plan of actions and milestones (POA&M) prioritization. (Recommendation 3)

Agency: Department of Agriculture
Status: Open

Comments: The Department of Agriculture did not state whether or not it concurred with this recommendation. As of February 2020, the department stated that it is developing a Risk Management Framework implementation plan which will include updates to USDA's process guide to ensure informed security control tailoring and updates to USDA's Plan of Actions and Milestones (POA&M) Standard Operation Procedure to inform prioritized POA&M mitigation strategies, through a consistent and repeatable security risk assessment process. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Agriculture should establish and document a process for coordination between cybersecurity risk management and enterprise risk management functions. (Recommendation 4)

Agency: Department of Agriculture
Status: Open
Priority recommendation

Comments: The Department of Agriculture did not state whether or not it concurred with this recommendation. As of February 2020, the department stated that it plans to establish a governance framework for USDA Enterprise Risk Management (ERM), which will provide a platform to increase coordination between stakeholders within the cybersecurity and enterprise risk management functions. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Commerce should update the department's policies to require (1) an organization-wide cybersecurity risk assessment and (2) the use of risk assessments to inform POA&M prioritization. (Recommendation 5)

Agency: Department of Commerce
Status: Open

Comments: The Department of Commerce did not state whether or not it concurred with this recommendation. As of January 2020, we had not received information pertaining to planned actions for this recommendation. Once the department states that it has taken action, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Commerce should establish a process for conducting an organization-wide cybersecurity risk assessment. (Recommendation 6)

Agency: Department of Commerce
Status: Open
Priority recommendation

Comments: The Department of Commerce did not state whether or not it concurred with this recommendation. As of February 2020, the department stated that its intends to evaluate whether there are any gaps in its cybersecurity policy pertaining to the establishment of an organization-wide cybersecurity risk assessment and will establish a plan to fill in gaps as necessary. The department added that it is making strides in the implementation of a tool that can aggregate data into a dashboard for a unified visibility across the department. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Energy should develop a cybersecurity risk management strategy that includes the key elements identified in this report. (Recommendation 8)

Agency: Department of Energy
Status: Open
Priority recommendation

Comments: The Department of Energy concurred with this recommendation. As of January 2020, the department stated that it was developing a department-wide risk management plan, to include a risk management strategy, and this would be completed by May 31, 2020. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Health and Human Services should develop a cybersecurity risk management strategy that includes the key elements identified in this report. (Recommendation 10)

Agency: Department of Health and Human Services
Status: Open
Priority recommendation

Comments: The Department of Health and Human Services concurred with this recommendation. As of January 2020, HHS stated that it is drafting a cybersecurity risk management memo that will detail its risk management strategy, including how the department will assess, respond to, and monitor risk. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Health and Human Services should update the department's policies to require (1) an organization-wide cybersecurity risk assessment and (2) the use of risk assessments to inform security control tailoring. (Recommendation 11)

Agency: Department of Health and Human Services
Status: Open

Comments: The Department of Health and Human Services partially concurred with this recommendation. As of January 2020, HHS stated that it is in the process of updating its policies to address the missing elements and plans to finalize the revisions by March 2021. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Health and Human Services should establish a process for conducting an organization-wide cybersecurity risk assessment. (Recommendation 12)

Agency: Department of Health and Human Services
Status: Open
Priority recommendation

Comments: The Department of Health and Human Services concurred with this recommendation. As of January 2020, HHS stated that it is drafting a cybersecurity risk management memo and capability model that will include a process for an organization-wide assessment of cybersecurity risk. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Homeland Security should develop a cybersecurity risk management strategy that includes the key elements identified in this report. (Recommendation 14)

Agency: Department of Homeland Security
Status: Open
Priority recommendation

Comments: The Department of Homeland Security concurred with this recommendation. As of January 2020, the department stated that it was in the process of developing an enterprise-wide Cybersecurity Risk Management Strategy that will define cybersecurity risk tolerance thresholds and promote inclusion of cybersecurity risk management into the Department's overall risk management capabilities. The estimated completion date for this effort is July 31, 2020. Once the department states that it has taken action, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Homeland Security should establish and document a process for coordination between cybersecurity risk management and enterprise risk management functions. (Recommendation 15)

Agency: Department of Homeland Security
Status: Open
Priority recommendation

Comments: The Department of Homeland Security concurred with this recommendation. As of January 2020, the department stated that, once developed, its Cybersecurity Risk Management Strategy will incorporate clarifications of the cybersecurity risk executive's role and will be coordinated with the DHS Office of the Chief Financial Officer, other offices within the DHS Management Directorate, and Department Components, as appropriate. The department estimated completing this effort by July 31, 2020. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Housing and Urban Developing should develop a cybersecurity risk management strategy that includes the key elements identified in this report. (Recommendation 16)

Agency: Department of Housing and Urban Development
Status: Open
Priority recommendation

Comments: The Department of Housing and Urban Development concurred with this recommendation. As of January 2020, the department said it planned to develop a cybersecurity risk management strategy that will determine how cybersecurity risks will be identified, framed, assessed, respond to, and monitored. The Department estimated completing this effort by August 2020. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of the Interior should establish and document a process for coordination between cybersecurity risk management and enterprise risk management functions. (Recommendation 20)

Agency: Department of the Interior
Status: Open
Priority recommendation

Comments: The Department of the Interior concurred with this recommendation. As of January 2020, the department stated that it cybersecurity and enterprise risk management teams would establish a process for bi-directional communication and status reporting. The Department estimated completing this effort by July 31, 2020. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Attorney General should develop a cybersecurity risk management strategy that includes the key elements identified in this report. (Recommendation 21)

Agency: Department of Justice
Status: Open
Priority recommendation

Comments: In its comments on our draft report, the Department of Justice did not state whether it concurred with this recommendation. As of January 2020, . the department reported that it had an integrated strategy for identifying, prioritizing, assessing, responding to, monitoring, and reporting on cybersecurity risks. Once the department states that it has taken action, we plan to verify whether implementation has occurred.

Recommendation: The Attorney General should fully establish and document a process for coordination between cybersecurity risk management and enterprise risk management functions. (Recommendation 22)

Agency: Department of Justice
Status: Open
Priority recommendation

Comments: In its comments on our draft report, the Department of Justice did not state whether or not it concurred with this recommendation. As of January 2020, the department stated that it is developing an ongoing mechanism to institutionalize coordination between its cybersecurity and ERM functions in fiscal year 2020. Once the department states that it has taken action, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Labor should update the department's policies to require (1) the use of risk assessments to inform control tailoring and (2) the use of risk assessments to inform POA&M prioritization. (Recommendation 23)

Agency: Department of Labor
Status: Open

Comments: The Department of Labor concurred with this recommendation. As of January 2020, we had not received information pertaining to this recommendation. Once the department states that it has taken action, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of State should update the department's policies to require (1) an organization-wide risk assessment, (2) an organization-wide strategy for monitoring control effectiveness, (3) system-level risk assessments, (4) the use of risk assessments to inform security control tailoring, and (5) the use of risk assessments to inform POA&M prioritization. (Recommendation 24)

Agency: Department of State
Status: Open

Comments: The Department of State concurred with this recommendation. As of January 2020, the department stated that it is actively working to update the applicable policies and procedures. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of State should establish and document a process for coordination between cybersecurity risk management and enterprise risk management functions. (Recommendation 25)

Agency: Department of State
Status: Open
Priority recommendation

Comments: The Department of State concurred with this recommendation. As of January 2020, the department stated that it is actively working to update the applicable policies and procedures. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Transportation should fully develop a cybersecurity risk management strategy that includes the key elements identified in this report. (Recommendation 26)

Agency: Department of Transportation
Status: Open
Priority recommendation

Comments: The Department of Transportation concurred with this recommendation. As of January 2020, the department stated that it would update its cybersecurity risk management strategy to include the identified missing elements. The Department estimated completing this effort by October 1, 2020. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Transportation should update the department's policies to require an organization-wide risk assessment. (Recommendation 27)

Agency: Department of Transportation
Status: Open

Comments: The Department of Transportation concurred with this recommendation. As of January 2020, the department stated that it would update it policies and procedures to require an organization-wide cybersecurity risk assessment. The Department estimated completing this effort by July 1, 2020. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of the Treasury should develop a cybersecurity risk management strategy that includes the key elements identified in this report. (Recommendation 29)

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: The Department of the Treasury did not state whether or not it concurred with this recommendation. As of January 2020, we had not received information pertaining to this recommendation. Once the department has provided information, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of the Treasury should establish a process for conducting an organization-wide cybersecurity risk assessment. (Recommendation 30)

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: The Department of the Treasury did not state whether or not it concurred with this recommendation. As of January 2020, we had not received information pertaining to this recommendation. Once the department has provided information, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of the Treasury should establish and document a process for coordination between cybersecurity risk management and enterprise risk management functions. (Recommendation 31)

Agency: Department of the Treasury
Status: Open

Comments: The Department of the Treasury did not state whether or not it concurred with this recommendation. As of January 2020, we had not received information pertaining to this recommendation. Once the department has provided information, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Veterans Affairs should develop a cybersecurity risk management strategy that includes the key elements identified in this report. (Recommendation 32)

Agency: Department of Veterans Affairs
Status: Open
Priority recommendation

Comments: The Department of Veterans Affairs concurred with this recommendation. As of January 2020, the department stated that it plans to develop a comprehensive risk management strategy in accordance with its updated cybersecurity program directive and plans to finalize the strategy by June 30, 2020. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Veterans Affairs should update the department's policies to require an organization-wide cybersecurity risk assessment. (Recommendation 33)

Agency: Department of Veterans Affairs
Status: Open

Comments: The Department of Veterans Affairs concurred with this recommendation. As of January 2020, VA stated that it plans to incorporate this requirement into its updated policies by June 30, 2020. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Veterans Affairs should establish a process for conducting an organization-wide cybersecurity risk assessment. (Recommendation 34)

Agency: Department of Veterans Affairs
Status: Open
Priority recommendation

Comments: The Department of Veterans Affairs concurred with this recommendation. As of January 2020, VA stated that it plans to fully document its process for an organization-wide cybersecurity risk assessment by June 30, 2020. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Secretary of Veterans Affairs should establish and document a process for coordination between cybersecurity risk management and enterprise risk management functions. (Recommendation 35)

Agency: Department of Veterans Affairs
Status: Open

Comments: The Department of Veterans Affairs concurred with this recommendation. As of January 2020, VA described efforts under way to institutionalize coordination between cybersecurity and enterprise risk management functions and stated that this coordination will be documented in detail by June 30, 2020. Once the department has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Administrator of the Environmental Protection Agency (EPA) should fully develop a cybersecurity risk management strategy that includes the key elements identified in this report. (Recommendation 38)

Agency: Environmental Protection Agency
Status: Open
Priority recommendation

Comments: The Environmental Protection Agency did not state whether or not it concurred with this recommendation. As of January 2020, EPA stated that its strategic plans are under review beginning in the fourth quarter of fiscal year 2020. Once the agency has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Administrator of EPA should update the agency's policies to require an organization-wide cybersecurity risk assessment. (Recommendation 39)

Agency: Environmental Protection Agency
Status: Open

Comments: The Environmental Protection Agency did not state whether or not it concurred with this recommendation. As of January 2020, EPA stated that it is establishing a process to review, update, and reissue its policies. Once the agency has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Administrator of EPA should establish a process for conducting an organization-wide cybersecurity risk assessment. (Recommendation 40)

Agency: Environmental Protection Agency
Status: Open
Priority recommendation

Comments: The Environmental Protection Agency did not state whether or not it concurred with this recommendation. As of January 2020, we had not received information pertaining to this recommendation. Once the agency has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Administrator of EPA should fully establish and document a process for coordination between cybersecurity risk management and enterprise risk management functions. (Recommendation 41)

Agency: Environmental Protection Agency
Status: Open

Comments: The Environmental Protection Agency did not state whether or not it concurred with this recommendation. As of January 2020, we had not received information pertaining to this recommendation. Once the agency has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Administrator of General Services should establish a process for conducting an organization-wide cybersecurity risk assessment. (Recommendation 44)

Agency: General Services Administration
Status: Open
Priority recommendation

Comments: The General Services Administration concurred with this recommendation. As of January 2020, the agency stated that it would establish a process for conducting an organization-wide cybersecurity risk assessment. The administration estimated completing this effort by June 30, 2020. Once the administration has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Administrator of the National Aeronautics and Space Administration (NASA) should update the agency's policies to require (1) an organization-wide risk assessment and (2) the use of risk assessments to inform POA&M prioritization. (Recommendation 46)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. As of January 2020, the agency stated that it is working to address gaps in its cybersecurity policy. Once NASA has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Administrator of NASA should establish a process for conducting an organization-wide cybersecurity risk assessment. (Recommendation 47)

Agency: National Aeronautics and Space Administration
Status: Open
Priority recommendation

Comments: NASA concurred with this recommendation. As of January 2020, NASA stated that the agency is in the process of documenting its process for conducting an organization-wide cybersecurity risk assessment. NASA's planned completion date for this effort is September 30, 2020. Once NASA has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Chairman of NRC should update the agency's policies to require (1) an organization-wide cybersecurity risk assessment and (2) the use of risk assessments to inform POA&M prioritization. (Recommendation 50)

Agency: Nuclear Regulatory Commission
Status: Open

Comments: NRC concurred with this recommendation. As of January 2020, we had not received information pertaining to this recommendation. Once the commission has provided information, we plan to verify whether implementation has occurred.

Recommendation: The Chairman of NRC should establish and document a process for coordination between cybersecurity risk management and enterprise risk management functions. (Recommendation 52)

Agency: Nuclear Regulatory Commission
Status: Open

Comments: NRC concurred with this recommendation. As of January 2020, we had not received information pertaining to this recommendation. Once the commission has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Director of the Office of Personnel Management (OPM) should update the agency's policies to require (1) an organization-wide cybersecurity risk assessment and (2) the use of risk assessments to inform control tailoring. (Recommendation 53)

Agency: Office of Personnel Management
Status: Open

Comments: OPM concurred with this recommendation. As of January 2020, OPM stated that it planned to update its policies to address the missing elements. Once OPM has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Director of OPM should establish a process for conducting an organization-wide cybersecurity risk assessment. (Recommendation 54)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM concurred with this recommendation. As of January 2020, the office stated that it planned to formalize its process for an organization-wide cybersecurity assessment. Once OPM has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Administrator of SBA should establish a process for conducting an organization-wide cybersecurity risk assessment. (Recommendation 57)

Agency: Small Business Administration
Status: Open
Priority recommendation

Comments: SBA concurred with this recommendation. As of January 2020, SBA stated that it intends to finalize its process for an agency-wide cybersecurity risk assessment by March 31, 2020. Once SBA has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Commissioner of the Social Security Administration should fully establish and document a process for coordination between cybersecurity risk management and enterprise risk management functions. (Recommendation 58)

Agency: Social Security Administration
Status: Open
Priority recommendation

Comments: SSA concurred with this recommendation. As of January 2020, SSA stated that it has initiated a formal process for coordination between its cybersecurity risk management and enterprise risk management teams and that this process should be fully established by the third quarter of FY 2020. Once SSA has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The EPA Administrator should direct EPA officials responsible for appointing advisory committee members to follow a key step in its appointment process—developing and including draft membership grids in appointment packets with staff rationales for proposed membership—for all committees. (Recommendation 1)

Agency: Environmental Protection Agency
Status: Open

Comments: In September 2019, EPA restated its reasons for disagreeing with this recommendation. (EPA's rationale for disagreeing was originally stated in a June 2019 letter included in an appendix in our report.) We will provide updated information regarding this recommendation when it becomes available.

Recommendation: EPA's Designated Agency Ethics Official should direct EPA's Ethics Office, as part of its periodic review of EPA's ethics program, to evaluate—for example, through audits or spot-checks—the quality of financial disclosure reviews for special government employees appointed to EPA advisory committees. (Recommendation 2)

Agency: Environmental Protection Agency
Status: Open

Comments: In August 2019, EPA notified GAO that it expects to launch an electronic financial disclosure reporting system for special government employees in January 2021. Once financial disclosure forms for these individuals are available electronically, EPA's Ethics Office will be better positioned to audit or review the forms, according to EPA officials. In addition, the electronic filing system should minimize errors (e.g. failing to record the date that the form was received) made by filers and reviewers, according to EPA officials.

Recommendation: The Director of the Bureau of Land Management (BLM) should create and implement a policy for standard posting requirements regarding comments and their identity information, particularly for duplicate comments, and should clearly communicate this policy to the public on the BLM website. (Recommendation 1)

Agency: Department of the Interior: Bureau of Land Management
Status: Open

Comments: BLM concurred with the recommendation. In December 2019, BLM indicated that it will develop and issue policy for standard posting requirements regarding public comments and associated identity information as well as duplicative comments which will be available on BLM's website. BLM officials estimate that this will be completed in March 2020. Until these items are completed, our recommendation to BLM remains open.

Recommendation: The Administrator of Centers for Medicare & Medicaid Services (CMS) should create and implement a policy for standard posting requirements regarding comments and their identity information, particularly for duplicate comments, and should clearly communicate this policy to the public on the CMS website. (Recommendation 2)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: In January 2020, the Department of Health and Human Services stated that CMS already has policies for standard posting requirements, and noted that they would update their policy and communicate it on the CMS website. However, while CMS provided us with an excerpt of the updated language, as written, it does not include information about how the agency posts duplicate comments. Further, CMS did not provide us with this policy, and our review of the website does not indicate any changes have been made. HHS stated it would provide additional follow up actions by 7/23/2020. Given that we found significant variation in the way that CMS posts comments, even within a single docket, we continue to believe that it is important for CMS to develop and implement a standard policy for posting duplicate comments and their identity information, in addition to communicating this policy to the public on the CMS website.

Recommendation: The Director of the Consumer Financial Protection Bureau (CFPB) should finalize its draft policy for posting comments and their identity information, particularly for duplicate comments, and clearly communicate it to the public on the CFPB website. (Recommendation 3)

Agency: Consumer Financial Protection Bureau
Status: Open

Comments: CFPB concurred with the recommendation. In December 2019, CFPB indicated that it will develop new language for consumerfinance.gov to better explain the Bureau's "post all" policy, and any exceptions to it. Additionally, CFPB is finalizing internal procedures for posting comments. Until these items are completed, our recommendation to CFPB remains open.

Recommendation: The Assistant Secretary of Labor for the Employee Benefits Security Administration (EBSA) should
1. create and implement a policy for standard posting requirements regarding comments and their identity information, particularly for duplicate comments;
2. clearly communicate this policy to the public on the EBSA website; and
3. evaluate the duplicative practice of replicating rulemaking dockets on the EBSA website, to either discontinue the practice or include a reference to Regulations.gov and explanation of how the pages relate to one another. (Recommendation 4)

Agency: Department of Labor: Employee Benefits Security Administration
Status: Open

Comments: EBSA concurred with the recommendation. In September 2019, EBSA stated that it will develop a written policy regarding posting of comments, including that of duplicate comments. This information will be available on their website. Additionally, EBSA will post a reference to Regulations.gov as part of each Notice of Proposed Rulemaking (NPRM) webpage that includes public comments together with an explanation of its relation to Regulations.gov as a means to access public comments on EBSA's rulemaking initiatives. EBSA officials did not provide a date by which these actions will be implemented. Additionally, while EBSA noted that internal and external users prefer the agency's current practice of replicating rulemaking dockets, the agency did not provide evidence that a formal evaluation had been conducted, and did not identify plans to do so. As a result, at this time our recommendation to EBSA remains open.

Recommendation: The Administrator of the Environmental Protection Agency (EPA) should finalize its draft policy for posting comments and their identity information, particularly for duplicate comments, and clearly communicate it to the public on the EPA website. (Recommendation 5)

Agency: Environmental Protection Agency
Status: Open

Comments: EPA concurred with the recommendation. In January 2020, EPA indicated that it will finalize its Docket Center's Document Processing Standard Operating Procedure as well as its website. This update will include information detailing when all duplicate comments are posted to Regulations.gov and when just one representative sample of a duplicate comment is posted. EPA officials estimate that this will be completed in February 2020. Until these items are completed, our recommendation to EPA remains open.

Recommendation: The Director of the Fish and Wildlife Service (FWS) should create and implement a policy for standard posting requirements regarding comments and their identity information, particularly for duplicate comments, and should clearly communicate this policy to the public on the FWS website. (Recommendation 6)

Agency: Department of the Interior: United States Fish and Wildlife Service
Status: Open

Comments: FWS concurred with the recommendation. In December 2019, FWS stated that it will update its service manual to include all standard posting requirements regarding public comments and their identity information. Additionally, FWS will include a statement on the FWS' website to inform the public about posting of public comments and identity information to regulations.gov. FWS officials estimate that this will be completed in June 2020. Until these items are completed, our recommendation to FWS remains open.

Recommendation: The Administrator of the Wage and Hour Division (WHD) should clearly communicate its policy for posting comments and their identity information, particularly for duplicate comments, to the public on the WHD website. (Recommendation 8)

Agency: Department of Labor: Wage and Hour Division
Status: Open

Comments: WHD concurred with the recommendation. In August 2019, WHD indicated that it will add text to each webpage for any rulemaking that invites public comments which states that any personal information included in the comments (including duplicate) will be posted to Regulations.gov without change. However, the text provided by officials does not explain WHD's policy of posting duplicate comments as a group under a single document ID, and therefore does not clearly communicate the agency's posting practices to the public. As a result, at this time our recommendation to WHD remains open.

Recommendation: The Administrator of EPA should work with the Commissioner of FDA and Secretary of Agriculture to incorporate leading collaboration practices as they implement their interagency FLW reduction strategic plan, to include (1) agreeing on roles and responsibilities; (2) developing mechanisms to monitor, evaluate, and report on results; (3)clearly defining short- and long-term outcomes; (4) identifying how leadership commitment will be sustained; and (5) ensuring that the relevant stakeholders have been included in the collaborative effort.(Recommendation 1)

Agency: Environmental Protection Agency
Status: Open

Comments: The agency agreed with this recommendation. As of June 2020, EPA indicated that its proposed completion date is October 2020. EPA published joint and individual agency accomplishments in each of the six priority areas listed as contributing efforts on EPA's webpage (https://www.epa.gov/sustainable-management-food/winning-reducing-food-waste-federal-interagency-strategy). In addition, EPA indicated that it is coordinating with government and other stakeholders through: (1) monthly high-level check-in calls for senior USDA and FDA officials, in which the meeting chair rotates among agencies; (2) twice a month (or as needed) staff work group meetings, led by the recently appointed USDA food loss and waste liaison, to explore potential activities aligned with the six priority areas in the interagency strategy to reduce food loss and waste; and (3) participation in quarterly meetings with relevant stakeholders, such as ReFED, the Food Waste Reduction Alliance (FWRA), and Further with Food, to coordinate efforts and learn of opportunities to collaborate on reducing food loss and waste. We will continue to follow up with the agency. When we confirm what additional actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of FDA should work with the Administrator of EPA and Secretary of Agriculture to incorporate leading collaboration practices as they implement their interagency FLW reduction strategic plan, to include (1) agreeing on roles and responsibilities; (2) developing mechanisms to monitor, evaluate, and report on results; (3)clearly defining short- and long-term outcomes; (4) identifying how leadership commitment will be sustained; and (5) ensuring that the relevant stakeholders have been included in the collaborative effort. (Recommendation 2)

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: The agency agreed with this recommendation. As of December 2019, we are following up with the agency. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Agriculture should work with Administrator of EPA and Commissioner of FDA to incorporate leading collaboration practices as they implement their interagency FLW reduction strategic plan, to include (1) agreeing on roles and responsibilities; (2) developing mechanisms to monitor, evaluate, and report on results; (3)clearly defining short- and long-term outcomes; (4) identifying how leadership commitment will be sustained; and (5) ensuring that the relevant stakeholders have been included in the collaborative effort. (Recommendation 3)

Agency: Department of Agriculture
Status: Open

Comments: The agency agreed with this recommendation. As of December 2019, we are following up with the agency. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Navy should take steps to ensure that Navy and Marine Corps' installation personnel verify that private developers are identifying and evaluating privatized properties for historic significance, as appropriate. (Recommendation 1)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Army should take steps to ensure that Army installation personnel verify that private developers are identifying and evaluating privatized properties for historic significance, as appropriate. (Recommendation 2)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Air Force should take steps to ensure that Air Force installation personnel verify that private developers are identifying and evaluating privatized properties for historic significance, as appropriate. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Navy should clarify the requirement for Navy and Marine Corps' installation personnel to conduct a physical inventory of historic properties every 3 years, including an assessment of each property's condition to ensure that facilities that have been identified and evaluated as historic are inventoried. (Recommendation 4)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Army should clarify the requirement for Army installation personnel to conduct a physical inventory of historic properties every 3 years, including an assessment of each property's condition to ensure that facilities that have been identified and evaluated as historic are inventoried. (Recommendation 5)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Air Force should clarify the requirement for Air Force installation personnel to conduct a physical inventory of historic properties every 3 years, including an assessment of each property's condition to ensure that facilities that have been identified and evaluated as historic are inventoried. (Recommendation 6)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should ensure that the Under Secretary of Defense for Acquisition and Sustainment, in collaboration with the military departments, develop and disseminate department-wide or service-wide guidance, on training related to historic preservation to installation personnel, including information on roles and responsibilities. (Recommendation 7)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Interior should direct BLM to collect centralized data on the acquisition method and interest acquired for the lands it obtains using LWCF funds as part of its planned update to Legacy Rehost 2000. (Recommendation 1)

Agency: Department of the Interior
Status: Open

Comments: As of November 2019, BLM reported it had awarded a contract to develop a new data system that will allow for centralized data collection on acquisition method and ownership interest. In addition, the agency issued updated guidance and procedures related to data entry to help ensure complete and accurate recording, which will improve BLM's ability to track acquisition method and interest acquired in the interim.

Recommendation: The Secretary of the Interior should direct BLM to develop more specific guidance to ensure that land acquisition data are entered correctly into the agency's data system. (Recommendation 2)

Agency: Department of the Interior
Status: Open

Comments: As of November 2019, BLM reported it was planning to develop specific guidance to ensure land acquisition data is entered correctly into its new data system.

Recommendation: The Secretary of Commerce should direct the National Institute of Standards and Technology (NIST) Director to work with other sponsoring federal agencies to develop and implement network-wide performance goals for the Manufacturing USA program with measurable targets and time frames. (Recommendation 1)

Agency: Department of Commerce
Status: Open

Comments: Commerce partially concurred with this recommendation according to its response to our report. Commerce stated that it lacks the legal authority to compel action by other federal agencies, and that legal constraints aside, it believes it is bad management practice to ask institutes to respond to performance goals issued by different bodies. As of March 2020, Commerce stated that it plans to report on performance goals for Commerce-sponsored institutes effective with the 2019 annual report, which it expects to issue by September 2020. Commerce also agreed to continue working closely with other sponsoring federal agencies on program and network goals for the Manufacturing USA institutes, but did not commit to working with sponsoring federal agencies to develop and implement network-wide performance goals with measurable targets and time frames. We recognize that Commerce does not have management authority over other the institutes sponsored by other agencies. We believe our report sufficiently characterizes the development of network-wide performance goals, targets, and time frames as a collaborative effort between Commerce and sponsoring agencies that is in keeping with Commerce's network-wide coordination functions under the RAMI Act. Moreover, our recommendation specifically pertained to developing performance goals for the Manufacturing USA program, not individual institutes. As we stated in our report, this would not necessarily entail new performance measures but, rather, could consist of measurable near-term performance goals corresponding to program performance measures already in place. Further, as stated in our report, GAO's prior work has shown that systems of performance measures benefit from certain key practices, such as creating a hierarchy that breaks down broad, long-term goals and objectives into more specific, near-term performance goals with measurable targets and time frames. Our recommendation was designed to ensure that the Manufacturing USA program performance measurement structure that Commerce has already worked with the other sponsoring agencies to develop more fully aligns with these key practices. We continue to believe that by working with other sponsoring federal agencies to develop and implement network-wide performance goals with targets and time frames, Commerce would be better able to observe and report on progress toward long-term Manufacturing USA program goals and objectives.

Recommendation: The Secretary of Commerce should direct the NIST Director to work with other sponsoring federal agencies to ensure that the Manufacturing USA network-wide performance measures are directly aligned with the network-wide performance goals, the Manufacturing USA strategic objectives and program goals, and the statutory purposes of the Revitalize American Manufacturing and Innovation (RAMI) Act. (Recommendation 2)

Agency: Department of Commerce
Status: Open

Comments: Commerce partially concurred with this recommendation according to its response to our report. In March 2020, Commerce stated that it supports the alignment of performance measures with performance goals only for Commerce-sponsored institutes. Commerce stated that it is unable to commit to this recommendation as 13 of the 14 existing institutes were authorized under authorities other than the RAMI Act and are sponsored by agencies other than Commerce. Commerce also stated that, until additional institutes authorized by the RAMI Act are in place, it does not support additional performance measures for the single Commerce-sponsored institute beyond the RAMI Act requirements, as doing so would impose an unfair level of scrutiny. Commerce agreed to report on performance metrics for department-sponsored institutes effective with the current annual report, which is expected by September 2020. We recognize that Commerce does not have management authority over other the institutes sponsored by other agencies. We believe our report sufficiently characterizes the effort to align the network-wide performance measures with network-wide performance goals and Manufacturing USA program goals as a collaborative effort between Commerce and sponsoring agencies that is in keeping with Commerce's coordination functions under the RAMI Act. Our recommendation does not ask Commerce to compel actions by other agencies, nor to develop any additional performance measures. As noted in our report, the Manufacturing USA program's performance measurement structure aligns near-term performance measures directly to the program's long-term goals. This structure bypasses connecting the performance measures with the program's objectives that have been developed to break down the long-term goals more specifically. GAO's prior work has shown that systems of performance measures benefit from certain key practices, such as creating a hierarchy that breaks down broad, long-term goals and objectives into more specific, near-term performance goals with measurable targets and time frames. Our recommendation was designed to ensure that the Manufacturing USA program performance measurement structure that Commerce has already worked with the other sponsoring agencies to develop more fully aligns with these key practices. We continue to believe that by working with other sponsoring federal agencies to ensure that the Manufacturing USA network-wide performance measures are directly aligned with the Manufacturing USA strategic program goals and objectives and the statutory purposes of the RAMI Act, Commerce would be better able to observe and report on progress made toward achieving the statutory purposes of the Manufacturing USA program.

Recommendation: The Secretary of Commerce should direct the NIST Director to develop criteria to evaluate whether the Commerce-sponsored institute can sustain its operations without additional federal financial assistance after its initial agreement. If an analysis based on such criteria indicates that additional federal financial assistance is needed to help the institute sustain its operations, then the Secretary of Commerce should consider a legislative proposal to amend relevant provisions of the RAMI Act. (Recommendation 3)

Agency: Department of Commerce
Status: Open

Comments: Commerce partially concurred with this recommendation according to its response to our report. In March 2020, Commerce stated that it will develop criteria to evaluate the sufficiency of the Commerce-sponsored institute's sustainability plan based on the anticipated operating costs of the institute at fully operational steady state, and the likelihood of sustaining those operations through the specific efforts outlined in the sustainability plan. Commerce stated that it plans to develop the evaluation criteria by April 2020. We will update this recommendation after we learn more about these efforts.

Recommendation: The Secretary of Defense should direct the Director of DOD's Manufacturing USA institutes to develop criteria to evaluate whether DOD-sponsored institutes can sustain their operations without additional federal financial assistance after their initial agreements. (Recommendation 4)

Agency: Department of Defense
Status: Open

Comments: DOD partially concurred with this recommendation. According to information DOD provided in March 2020, DOD developed criteria to evaluate whether each DOD-sponsored institute is effectively executing its mission, providing value to the department, and transitioning advanced manufacturing to U.S. manufacturers, while demonstrating progress toward business viability (diversified revenue, controlled costs, etc.). As of March 2020, DOD plans to incorporate these criteria into a strategic management plan, under which the department will review institutes' progress at the end of their agreements to determine the type and level of DOD's continued participation. DOD expects to complete work on the strategic management plan by the end of September 2020.

Recommendation: The Secretary of Energy should direct the Director of DOE's Manufacturing USA institutes to develop criteria to evaluate whether DOE-sponsored institutes can sustain their operations without additional federal financial assistance after their initial agreements. (Recommendation 5)

Agency: Department of Energy
Status: Open

Comments: DOE concurred with this recommendation according to its response to our report. In September 2019, DOE stated that it will direct the Directors of DOE-sponsored institutes to collectively work toward updating institute sustainability plans and activities and collaboratively develop criteria and metrics to assess the institutes' progress toward financial sustainability. After development of the metrics, DOE will track as appropriate. As of March 2020, DOE reported agreement with its institutes on an initial set of criteria and metrics to assess progress toward financial sustainability. We will update this recommendation as we collect more information about these efforts.

Recommendation: The Administrator of the Centers for Medicare and Medicaid Services should develop a plan with time frames and milestones to discontinue knowledge-based verification, such as by using Login.gov or other alternative verification techniques. (Recommendation 1)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open
Priority recommendation

Comments: HHS, on behalf of CMS, did not concur with this recommendation. In its February 2020 response to GAO, HHS stated that current NIST guidance to agencies was insufficient and that CMS would look forward to future guidance from NIST and OMB to help guide consideration of non-knowledge-based verification options. We continue to believe that our recommendation is valid because a variety of alternative methods to knowledge-based verification are available that CMS can consider to address the diverse population it serves. Further, NIST has agreed with our recommendation to develop additional guidance for agencies, and CMS may be able to use that guidance to identify a verification approach that does not really on knowledge-based techniques. We will continue to monitor the actions CMS may take to address the recommendation.

Recommendation: The Secretary of the Department of Veterans Affairs should develop a plan with time frames and milestones to discontinue knowledge-based verification, such as by using Login.gov or other alternative verification techniques. (Recommendation 6)

Agency: Department of Veterans Affairs
Status: Open
Priority recommendation

Comments: VA agreed with our recommendation. To fully implement this recommendation, VA needs to develop a plan with milestones to document the results of their evaluation of the alternatives the department stated it is interested in pursuing.

Recommendation: The Commissioner of Fiscal Service should develop and implement a mechanism to reasonably assure that all the journal entries recorded in the Schedules of the General Fund general ledgers can be readily identified and traced, such as through a unique identifier, to determine the effect of a transaction on all applicable general ledger accounts and line items of the Schedules of the General Fund, including the budget deficit. (Recommendation 1)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should develop and implement a mechanism to reasonably assure that payment transactions recorded in the Schedules of the General Fund general ledgers capture all of the key information needed, including payment schedules if applicable, to readily trace transactions to the information certified by the federal agency. (Recommendation 2)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should develop and implement additional reporting requirements with related guidance for federal agencies that better align with the General Fund financial reporting objectives and enable Fiscal Service to capture the effect of a transaction on all applicable general ledger accounts and line items of the Schedules of the General Fund, including the budget deficit. (Recommendation 3)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: We recommend that the Commissioner of Fiscal Service develop and implement a process that would enable Fiscal Service to obtain the information necessary to effectively assess the effect of the Statement of Difference on the Schedules of the General Fund for those federal agencies that have not implemented the Central Accounting and Reporting System. (Recommendation 4)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: We recommend that the Commissioner of Fiscal Service design and implement procedures to evaluate risks and monitor internal controls over financial reporting relevant to the Schedules of the General Fund. (Recommendation 5)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should develop and implement a mechanism for evaluating agencies' use of BETCs based on the enhanced guidance. (Recommendation 7)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should design and implement procedures to (1) obtain and review supporting documentation for reported activity included on Agency Submission Forms and (2) assess the overall completeness of federal agency activity reported on Agency Submission Forms. (Recommendation 8)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should design and implement procedures to periodically review all active Treasury accounts to determine whether they are valid and the related General Fund account balances are consistent with federal agency records. (Recommendation 10)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should enhance current procedures for reviewing negative balances to include Treasury accounts with indefinite periods of availability. (Recommendation 11)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Director of OMB should ensure that information is collected regarding how centralized reporting of procurement requirements might reduce recipient reporting burden—including input from stakeholders such as contractors through an iterative and ongoing process—to inform OMB's planned expansion of the Central Reporting Portal.

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: In an October 2019 written response to the recommendation contained in GAO-19-299, OMB acknowledged the importance of collecting stakeholder input and described some steps that it has taken to do so in the past. The letter also stated OMB's intention to engage key stakeholders moving forward but was not specific regarding steps it planned to take related to the potential expansion of the Central Reporting Portal. GAO will continue to monitor this issue including what specific actions, if any, OMB takes in response to this recommendation.

Recommendation: To the extent that Congress wants to further encourage federal agencies to use tribal energy sources, it should consider amending the Energy Policy Act of 2005 to provide more specific direction to federal agencies for implementing the tribal energy preference, to include consideration of additional incentives or requirements to use these energy sources. (Matter for Consideration 1)

Agency: Congress
Status: Open

Comments: We will provide updated information when we confirm what steps Congress has taken related to this matter.

Recommendation: The Secretary of Agriculture should take action to meet the data center optimization metric targets established by OMB under DCOI. (Recommendation 1)

Agency: Department of Agriculture
Status: Open

Comments: In comments on our report, the Department of Agriculture (Agriculture) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department subsequently reported meeting its targets for the advanced energy metering and server utilization metrics. However, the department also reported that it had not yet met its target for the virtualization metric. We will continue to monitor Agriculture's progress in implementing this recommendation.

Recommendation: The Secretary of Commerce should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 2)

Agency: Department of Commerce
Status: Open

Comments: In comments on our report, the Department of Commerce (Commerce) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department subsequently reported meeting its targets for server utilization. However, the department also reported that it had not yet met its target for the virtualization and advanced energy metering metrics. We will continue to monitor Commerce's progress in implementing this recommendation.

Recommendation: The Secretary of Defense should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: In comments on our report, the Department of Defense agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center closures target. The department subsequently reported meeting its closure target for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor the department's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of Defense should identify additional savings opportunities to achieve the targets for data center-related cost savings established under DCOI by OMB. (Recommendation 4)

Agency: Department of Defense
Status: Open

Comments: The Department of Defense is taking action to implement our recommendation. In comments on our report, the department stated that it had already identified significant cost savings through activities such as the identification of system migration candidates and the use of cloud services. The department also said that while it would continue to optimize its data centers, the need for IT would continue to grow, and this growth might ultimately lead to an increase in total data center costs, despite overall per unit cost reductions. In addition, after the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department reported achieving a total savings of $102.30 million and reported plans to save an additional $109.50 million in savings for fiscal year 2020. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor the department's efforts through fiscal year 2020 to address the recommendation.

Recommendation: The Secretary of Defense should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 5)

Agency: Department of Defense
Status: Open

Comments: The Department of Defense is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department subsequently reported meeting its target for server utilization. However, the department also reported that it had not yet met its target for the virtualization metric and advanced energy metering. We will continue to monitor the department's efforts to address the recommendation.

Recommendation: The Secretary of Energy should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 6)

Agency: Department of Energy
Status: Open

Comments: In comments on our report, the Department of Energy (Energy) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center closure target. The department subsequently reported meeting its closure target for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor Energy's progress in implementing this recommendation through fiscal year 2020.

Recommendation: The Secretary of Energy should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 7)

Agency: Department of Energy
Status: Open

Comments: The Department of Energy (Energy) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. The department subsequently reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor Energy's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of the Department of Health and Human Services (HHS) should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 8)

Agency: Department of Health and Human Services
Status: Open

Comments: The Department of Health and Human Services (HHS) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center closure target. The department subsequently reported meeting its closure target for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor HHS's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of HHS should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 9)

Agency: Department of Health and Human Services
Status: Open

Comments: The Department of Health and Human Services (HHS) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. Subsequently, the department reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor HHS's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of the Department of Homeland Security (DHS) should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 10)

Agency: Department of Homeland Security
Status: Open

Comments: In comments on our report, the Department of Homeland Security (DHS) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center closure target. Subsequently, the department reported meeting its closure target for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor DHS's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of DHS should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 11)

Agency: Department of Homeland Security
Status: Open

Comments: In comments on our report, The Department of Homeland Security (DHS) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. The department subsequently reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor DHS's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of Interior should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 12)

Agency: Department of the Interior
Status: Open

Comments: The Department of the Interior (Interior) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center closure target. Subsequently, the department reported meeting its closure goal for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor Interior's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of Interior should take action to meet the data center-related cost savings established under DCOI by OMB. (Recommendation 13)

Agency: Department of the Interior
Status: Open

Comments: The Department of Interior (Interior) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center related cost savings targets. Subsequently, the department reported achieving $0.2 million in data center-related cost savings and planned to save an additional $0.5 million in fiscal year 2020. We will continue to monitor the department's efforts through fiscal year 2020 to address the recommendation.

Recommendation: The Secretary of Interior should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 14)

Agency: Department of the Interior
Status: Open

Comments: The Department of Interior (Interior) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. The department subsequently reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor Interior's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Attorney General should take action to meet the data center optimization metric targets established for Justice under DCOI by OMB. (Recommendation 15)

Agency: Department of Justice
Status: Open

Comments: In comments on our report, the Department of Justice (Justice) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. The department subsequently reported meeting its targets for the virtualization and advanced energy metering metrics. However, the department did not have an established target for the server utilization metric. Justice stated that, due to OMB issuance of the revised DCOI guidance and metrics, the department had not developed a baseline and target for server utilization. Once it can track server utilization for a few reporting periods, the department stated that it will finalize its definition for underutilized severs and establish an appropriate target for the metric. We will continue to monitor the department's progress in implementing this recommendation.

Recommendation: The Secretary of the Department of Labor (Labor) should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 16)

Agency: Department of Labor
Status: Open

Comments: The Department of Labor (Labor) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. Subsequently, the department reported meeting its target for the server utilization metric. However, the department had not yet met its targets for the advanced energy metering and virtualization metrics. We will continue to monitor Labor's progress in implementing this recommendation.

Recommendation: The Secretary of State should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 17)

Agency: Department of State
Status: Open

Comments: In comments on our report, the Department of State (State) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center optimization closure target. The department subsequently reported meeting its closure goal for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor State's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of State should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 18)

Agency: Department of State
Status: Open

Comments: In comments on our report, the Department of State (State) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. Subsequently, the department reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor State's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of Transportation should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 19)

Agency: Department of Transportation
Status: Open

Comments: In comments on our report, the Department of Transportation (Transportation) neither agreed nor disagreed with the recommendation and has begun taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center closure target. The department subsequently reported meeting its closure goal for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor Transportation's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of Transportation should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 20)

Agency: Department of Transportation
Status: Open

Comments: The Department of Transportation (Transportation) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. Subsequently, the department reported meeting its target for server utilization. However, the department had not yet met its targets for the advanced energy metering and virtualization metrics. We will continue to monitor Transportation's progress in implementing this recommendation.

Recommendation: The Secretary of Treasury should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 21)

Agency: Department of the Treasury
Status: Open

Comments: The Department of Treasury (Treasury) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. The department subsequently reported meeting its target for server utilization. However, the department had not yet met its targets for the advanced energy metering and virtualization metrics. We will continue to monitor Treasury's progress in implementing this recommendation.

Recommendation: The Secretary of the Department of Veterans Affairs (VA) should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 22)

Agency: Department of Veterans Affairs
Status: Open
Priority recommendation

Comments: VA agreed with our recommendation and, as of January 2020, the department reported that it had closed 16 data centers to meet its fiscal year 2019 closure target. To fully implement this recommendation, VA will need to demonstrate sustained implementation progress over time, including meeting its fiscal year 2020 data center closure target.

Recommendation: The Secretary of VA should take action to meet the data center-related cost savings established under DCOI by OMB. (Recommendation 23)

Agency: Department of Veterans Affairs
Status: Open
Priority recommendation

Comments: VA agreed with our recommendation and, as of January 2020, the department reported that it had met its fiscal year 2019 cost savings target. To fully implement this recommendation, VA will need to demonstrate sustained implementation progress over time, including meeting its fiscal year 2020 data center cost savings target.

Recommendation: The Secretary of VA should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 24)

Agency: Department of Veterans Affairs
Status: Open
Priority recommendation

Comments: VA agreed with our recommendation and, as of January 2020, the department reported that it had met its fiscal year 2019 targets for three of the four data center optimization metrics tracked by the Office of Management and Budget (OMB). To fully implement this recommendation, VA will need to meet all four of OMB's metrics, and also demonstrate sustained implementation progress over time by continuing to meet the four metrics across fiscal years.

Recommendation: The Administrator of the Environmental Protection Agency (EPA) should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 25)

Agency: Environmental Protection Agency
Status: Open

Comments: The Environmental Protection Agency (EPA) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established a new data center closure target. EPA subsequently reported that it based its three planned closures for fiscal year 2019 on the data center definition applicable while developing its fiscal year 2019 DCOI strategic plan. However, when OMB updated its data center guidance it changed the definition of a data center, and as a result, the three facilities EPA planned to close no longer qualified as data centers. Further, EPA did not have plans to close any additional data centers. While EPA reported to us that it completed the planned closures, the three facilities did not represent what OMB now considers a data center, and so, EPA did not report the closures in its data center inventory update. However, we acknowledge that EPA closed the facilities identified in its April 2019 plan and did not plan to close any data centers that met OMB's new definition, meaning that the agency met its revised fiscal year 2019 goal of zero closures. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor EPA's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Administrator of EPA should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 26)

Agency: Environmental Protection Agency
Status: Open

Comments: The Environmental Protection Agency (EPA) is taking action to implement our recommendation. The agency established new data center optimization targets after the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019. Subsequently, the agency reported meeting its targets for the advanced energy metering and server utilization metrics. However, the agency had not yet met its target for the virtualization metric. We will continue to monitor EPA's progress in implementing this recommendation.

Recommendation: The Administrator of the National Aeronautics and Space Administration should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 28)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: In comments on our report, the National Aeronautics and Space Administration (NASA) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established new data center optimization targets. The agency subsequently reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor NASA's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Director of the National Science Foundation should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 29)

Agency: National Science Foundation
Status: Open

Comments: The National Science Foundation (NSF) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established new data center optimization targets. Subsequently, the agency reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor NSF's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Chairman of the Nuclear Regulatory Commission should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 30)

Agency: Nuclear Regulatory Commission
Status: Open

Comments: The Nuclear Regulatory Commission (NRC) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established new data center optimization targets. The agency subsequently reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor NRC's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Director of the Office of Personnel Management (OPM) should take action to meet the data center-related cost savings established under DCOI by OMB. (Recommendation 31)

Agency: Office of Personnel Management
Status: Open

Comments: In comments on our report, The Office of Personnel Management (OPM) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established a new data center-related cost savings target. Subsequently, the agency reported meeting its fiscal year 2019 target of $7.65 million and planned to save an additional $7.65 million in fiscal year 2020. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor OPM's progress in implementing this recommendation through fiscal year 2020.

Recommendation: The Director of OPM should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 32)

Agency: Office of Personnel Management
Status: Open

Comments: In comments on our report, the Office of Personnel Management (OPM) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established new data center optimization targets. The agency subsequently reported meeting its targets for the virtualization and server utilization metrics. However, it had not met its target for advanced energy metering. We will continue to monitor OPM's progress in implementing this recommendation.

Recommendation: The Administrator of the Small Business Administration should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 33)

Agency: Small Business Administration
Status: Open

Comments: In comments on our report, the Small Business Administration (SBA) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established new data center optimization targets. Subsequently, the agency reported meeting its target for server utilization. However, the agency had not yet met its targets for the advanced energy metering and virtualization metrics. We will continue to monitor SBA's progress in implementing this recommendation.

Recommendation: The Commissioner of the Social Security Administration (SSA) should take action to meet the data center-related cost savings established under DCOI by OMB. (Recommendation 34)

Agency: Social Security Administration
Status: Open

Comments: In comments on our report, the Social Security Administration (SSA) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established a new data center-related cost savings target. The agency subsequently reported meeting its fiscal year 2019 cost savings target of $0. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor SSA's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Commissioner of SSA should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 35)

Agency: Social Security Administration
Status: Open

Comments: In comments on our report, the Social Security Administration (SSA) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established new data center optimization targets. Subsequently, the agency reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor SSA's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Director of the Office of Management and Budget should require agencies to explicitly report, at least on a quarterly basis, the savings and cost avoidance associated with cloud computing investments. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: As of May 2020, the Office of Management and Budget (OMB) has not yet taken any actions to implement our recommendation. We will continue to monitor OMB's progress in implementing this recommendation.

Recommendation: The Secretary of Agriculture should ensure that the CIO of Agriculture establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 3)

Agency: Department of Agriculture
Status: Open

Comments: The Department of Agriculture (Agriculture) concurred with our recommendation and stated that it planned to develop a mechanism to track savings to implement this recommendation. Specifically, Agriculture officials reported in April 2020 that the department had established an office to assist with cloud migration efforts and instituted a process that requires cloud migration efforts to submit cost data and report cloud savings in accordance with OMB guidance. Officials noted that the department would implement a mechanism within one year once OMB issues guidance related to tracking savings (OMB has not yet implemented guidance in this area). We will continue to monitor Agriculture's progress on these efforts.

Recommendation: The Secretary of Commerce should ensure that the CIO of Commerce establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 4)

Agency: Department of Commerce
Status: Open

Comments: The Department of Commerce (Commerce) concurred with our recommendation and stated that it planned to develop a mechanism to track savings to implement this recommendation. In October 2019, Commerce officials noted that the department would update its current procedures related to tracking savings and cost avoidances within one year once OMB issues guidance related to tracking cloud savings (OMB has not yet implemented guidance in this area). As of May 2020, the procedures have not yet been updated. We will continue to monitor Commerce's progress with these efforts.

Recommendation: The Secretary of Defense should ensure that the CIO of Defense completes an assessment of all IT investments for suitability for migration to a cloud computing service, in accordance with OMB guidance. (Recommendation 5)

Agency: Department of Defense
Status: Open

Comments: The Department of Defense (Defense) concurred with our recommendation and stated that the department planned to publish guidance in this area. Specifically, in April 2020, Defense officials reported that the department planned to publish guidance by July 2020 that required all department components to rationalize business and IT applications in alignment with the department's enterprise-wide process for conducting software application rationalization and the department's Cloud Strategy. We will continue to monitor Defense's progress on this effort.

Recommendation: The Secretary of Defense should ensure that the CIO of Defense establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 6)

Agency: Department of Defense
Status: Open

Comments: As of May 2020, the Department of Defense (Defense) has not yet taken any actions to implement our recommendation. We will continue to monitor Defense's progress in implementing this recommendation.

Recommendation: The Secretary of Education should ensure that the CIO of Education completes an assessment of all IT investments for suitability for migration to a cloud computing service, in accordance with OMB guidance. (Recommendation 8)

Agency: Department of Education
Status: Open

Comments: The Department of Education (Education) concurred with our recommendation and stated that the department would complete an assessment of all IT investments for cloud services. In February 2020, Education officials reported that the department had taken action to update its guidance to include a requirement for assessing new and existing investments for cloud services. However, as of May 2020, based on our review of IT Dashboard data, Education has not yet completed an assessment of 23 investments for these services. We will continue to monitor Education's progress with this effort.

Recommendation: The Secretary of Education should ensure that the CIO of Education establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 9)

Agency: Department of Education
Status: Open

Comments: The Department of Education (Education) concurred with our recommendation and stated that the department would take action to address it. In May 2020, Education officials reported that the department had taken steps to identify a number of cloud investments with cost savings and avoidance data as a part of the integrated data call required by OMB. However, the department still needs to establish a consistent and repeatable mechanism to track savings for all IT investments. We will continue to monitor Education's progress with this effort.

Recommendation: The Secretary of Energy should ensure that the CIO of Energy updates the agency's guidance on assessing IT investments for suitability for cloud computing services to include a requirement to assess new acquisitions for these services. (Recommendation 10)

Agency: Department of Energy
Status: Open

Comments: The Department of Energy (Energy) concurred with our recommendation and stated that the department would update its IT budget guidance to address our recommendation. In February 2020, Energy officials provided a portion of a guidance document, but it did not include language that addressed our recommendation. We will continue to monitor the status of this recommendation.

Recommendation: The Secretary of Energy should ensure that the CIO of Energy completes an assessment of all IT investments for suitability for migration to a cloud computing service, in accordance with OMB guidance. (Recommendation 11)

Agency: Department of Energy
Status: Open

Comments: The Department of Energy (Energy) concurred with our recommendation and stated that the department would update its IT budget guidance to address our recommendation. In February 2020, Energy officials provided a portion of a guidance document, but it did not include language on assessing investments for cloud services. In addition, as of May 2020, based on our review of data on the IT Dashboard, Energy has not yet completed an assessment of 107 investments for these services. We will continue to monitor Energy's progress with this effort.

Recommendation: The Secretary of Energy should ensure that the CIO of Energy establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 12)

Agency: Department of Energy
Status: Open

Comments: The Department of Energy (Energy) concurred with our recommendation and stated that the CIO would establish a mechanism to address our recommendation. In February 2020, Energy officials reported that they had identified a number of cloud investments with cost savings as part of the integrated data call required by OMB. However, the department still needs to establish a consistent and repeatable mechanism to track savings for all IT investments. We will continue to monitor Energy's progress with this effort.

Recommendation: The Secretary of the Department of Health and Human Services (HHS) should ensure that the CIO of HHS establishes guidance on assessing new and existing IT investments for suitability for cloud computing services, in accordance with OMB guidance. (Recommendation 13)

Agency: Department of Health and Human Services
Status: Open

Comments: The Department of Health and Human Services (HHS) concurred with our recommendation and stated that the Office of the CIO would revise its guidance by September 30, 2019 to address it. As of May 2020, we have not received a more recent update from HHS regarding its implementation of our recommendation. We will continue to monitor HHS's progress in implementing this recommendation.

Recommendation: The Secretary of Health and Human Services should ensure that the CIO of HHS completes an assessment of all IT investments for suitability for migration to a cloud computing service, in accordance with OMB guidance. (Recommendation 14)

Agency: Department of Health and Human Services
Status: Open

Comments: The Department of Health and Human Services (HHS) concurred with our recommendation and stated that the CIO would complete an assessment of all IT investments as part of its portfolio review for fiscal year 2021. As of May 2020, we have not received a more recent update from HHS regarding its implementation of our recommendation. We will continue to monitor HHS's progress in implementing this recommendation.

Recommendation: The Secretary of Health and Human Services should ensure that the CIO of HHS establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 15)

Agency: Department of Health and Human Services
Status: Open

Comments: The Department of Health and Human Services (HHS) concurred with our recommendation and stated that the CIO would take action to track savings as part of its portfolio review process for fiscal year 2021. As of May 2020, we have not received a more recent update from HHS regarding its implementation of our recommendation. We will continue to monitor HHS's progress in implementing this recommendation.

Recommendation: The Secretary of Homeland Security should ensure that the CIO of the Department of Homeland Security (DHS) completes an assessment of all IT investments for suitability for migration to a cloud computing service, in accordance with OMB guidance. (Recommendation 16)

Agency: Department of Homeland Security
Status: Open

Comments: The Department of Homeland Security (DHS) concurred with our recommendation and stated that the department was taking steps to implement it. Specifically, in October 2019, DHS officials reported that the department was in the process of accessing its remaining systems to determine whether a cloud computing assessment should be completed but did not provide a date when this effort would be finished. As of May 2020, we have not received a more recent update from DHS regarding its implementation of our recommendation. We will continue to monitor the status of this recommendation.

Recommendation: The Secretary of Homeland Security should ensure that the CIO of DHS establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 17)

Agency: Department of Homeland Security
Status: Open

Comments: The Department of Homeland Security (DHS) concurred with our recommendation and stated that the department was taking steps to implement it. Specifically, in October 2019, DHS officials reported that the department was working on a plan to define the resources and processes needed to implement a mechanism to track savings that would be completed by October 2020. As of May 2020, we have not received a more recent update from DHS regarding its implementation of our recommendation. We will continue to monitor the status of this recommendation.

Recommendation: The Attorney General of the United States should ensure that the CIO of Justice completes an assessment of all IT investments for suitability for migration to a cloud computing service, in accordance with OMB guidance. (Recommendation 18)

Agency: Department of Justice
Status: Open

Comments: The Department of Justice (Justice) concurred with our recommendation, and stated that it would require components to assess all investments for cloud. However as of April 2020, based on our review of IT Dashboard data, Justice had not yet completed cloud assessments for 80 investments. We will continue to monitor Justice's progress with this effort.

Recommendation: The Attorney General of the United States should ensure that the CIO of Justice establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 19)

Agency: Department of Justice
Status: Open

Comments: The Department of Justice (Justice) concurred with our recommendation and stated that it would take action to address it. In December 2019, Justice officials reported that the department had taken steps to identify cloud investments and related savings data as part of an integrated data call required by OMB. However, the department still needs to establish a consistent and repeatable mechanism to track savings for all IT investments. We will continue to monitor Justice's progress in implementing this recommendation.

Recommendation: The Secretary of Labor should ensure that the CIO of Labor updates the agency's guidance on assessing IT investments for suitability for cloud computing services to include a requirement to assess existing investments for these services. (Recommendation 20)

Agency: Department of Labor
Status: Open

Comments: The Department of Labor (Labor) concurred with our recommendation and stated that the department was taking steps to integrate a process for assessing investments for cloud computing suitability into its budgeting process. Specifically, in February 2020, Labor officials reported that the department was updating its policy to reflect a Cloud First policy that will ensure that all department investment migrations to cloud services are Cloud smart but did not identify a time frame when the policy would be finalized. We will continue to monitor Labor's progress on these efforts.

Recommendation: The Secretary of Labor should ensure that the CIO of Labor completes an assessment of all IT investments for suitability for migration to a cloud computing service, in accordance with OMB guidance. (Recommendation 21)

Agency: Department of Labor
Status: Open

Comments: The Department of Labor (Labor) concurred with our recommendation and stated that the department planned to undertake a full review of data center-based applications for cloud suitability. Specifically, in February 2020, Labor officials reported that the department had created an Engineering Review Board in October 2019 to review proposed IT investments to ensure compliance with the department's cloud architecture, but did not provide a time frame for when all assessments of investments would be completed. We will continue to monitor Labor's progress on these efforts.

Recommendation: The Secretary of Labor should ensure that the CIO of Labor establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 22)

Agency: Department of Labor
Status: Open

Comments: The Department of Labor (Labor) concurred with our recommendation and stated that it planned to develop a mechanism to track savings to implement this recommendation. Specifically, in February 2020, Labor officials reported that the department was implementing a tool called Cloudchekr for tracking costs associated with cloud services that would also track related savings and cost avoidances, but no timeframe was provided for when the tool would consistently capture all savings from these efforts. We will continue to monitor Labor's progress on these efforts.

Recommendation: The Secretary of State should ensure that the CIO of State establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 23)

Agency: Department of State
Status: Open

Comments: The Department of State (State) concurred with our recommendation and stated that the department would develop a prototype tracking system ready for testing by the beginning of fiscal year 2020. As of May 2020, we have not received a more recent update from State regarding its implementation of our recommendation. We will continue to monitor State's progress in implementing this recommendation.

Recommendation: The Secretary of the Treasury should ensure that the CIO of Treasury completes an assessment of all IT investments for suitability for migration to a cloud computing service, in accordance with OMB guidance. (Recommendation 24)

Agency: Department of the Treasury
Status: Open

Comments: The Department of the Treasury (Treasury) has not yet taken any actions to implement our recommendation. As of May 2020, we have not received any update from the department regarding its implementation of our recommendation. We will continue to monitor Treasury's progress in implementing this recommendation.

Recommendation: The Secretary of the Treasury should ensure that the CIO of Treasury establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 25)

Agency: Department of the Treasury
Status: Open

Comments: The Department of the Treasury (Treasury) has not yet taken any actions to implement our recommendation. As of May 2020, we have not received any update from the department regarding its implementation of our recommendation. We will continue to monitor Treasury's progress in implementing this recommendation.

Recommendation: The Secretary of Transportation should ensure that the CIO of Transportation establishes guidance on assessing new and existing IT investments for suitability for cloud computing services. (Recommendation 26)

Agency: Department of Transportation
Status: Open

Comments: The Department of Transportation (Transportation) concurred with our recommendation but as of May 2020, has not yet taken any actions to implement it. We will continue to monitor Transportation's progress in implementing this recommendation.

Recommendation: The Secretary of Transportation should ensure that the CIO of Transportation completes an assessment of all IT investments for suitability for migration to a cloud computing service, in accordance with OMB guidance. (Recommendation 27)

Agency: Department of Transportation
Status: Open

Comments: The Department of Transportation (Transportation) concurred with our recommendation but as of May 2020, has not yet taken any actions to implement it. We will continue to monitor Transportation's progress in implementing this recommendation.

Recommendation: The Secretary of Transportation should ensure that the CIO of Transportation establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 28)

Agency: Department of Transportation
Status: Open

Comments: The Department of Transportation (Transportation) concurred with our recommendation, but as of May 2020, has not yet taken any actions to implement it. We will continue to monitor Transportation's progress in implementing this recommendation.

Recommendation: The Secretary of Veterans Affairs should ensure that the CIO of the Department of Veterans Affairs (VA) completes an assessment of all IT investments for suitability for migration to a cloud computing service, in accordance with OMB guidance. (Recommendation 29)

Agency: Department of Veterans Affairs
Status: Open

Comments: The Department of Veterans Affairs (VA) concurred with our recommendation and stated that the department would take action to address it. In February 2020, VA officials reported that the department had begun an assessment process and expected to complete this effort by June 30, 2024. We will continue to monitor VA's progress in implementing this recommendation.

Recommendation: The Secretary of Veterans Affairs should ensure that the CIO of VA establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 30)

Agency: Department of Veterans Affairs
Status: Open

Comments: The Department of Veterans Affairs (VA) concurred with our recommendation and stated that the department would take action to address it. In February 2020, VA officials reported that the department had begun populating a financial management application with data to track overall IT spending and cost savings, but did not provide a timeframe for when a mechanism to track this data would be finalized. We will continue to monitor VA's progress in implementing this recommendation.

Recommendation: The Administrator of General Services should ensure that the CIO of the General Services Administration establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 31)

Agency: General Services Administration
Status: Open

Comments: The General Services Administration (GSA) concurred with our recommendation and stated that the agency planned to develop a process for collecting cost savings data. Specifically, in January 2020, GSA officials reported that the agency intended to develop and document a process for collecting cost and savings data for current and new investments using cloud services. Officials noted that the documentation would provide guidance as to what savings data would be required to be collected, how frequent the data would be reported, and the process for approval, but did not provide a timeframe for when the guidance would be finalized. In addition, officials reported that, once the new process was finalized, the agency would pilot the new process in order to test the approach and the collection of data. As of May 2020, the process has not been finalized. We will continue to monitor GSA's progress in implementing this recommendation.

Recommendation: The Administrator of the Small Business Administration should ensure that the CIO of the Small Business Administration establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 32)

Agency: Small Business Administration
Status: Open

Comments: The Small Business Administration (SBA) concurred with our recommendation and reported that the agency would take action to address it. In November 2019, SBA officials reported that the agency had established a tool for monitoring the costs associated with the migration and deployment of cloud services. However, the documentation SBA provided did not indicate how cloud savings and cost avoidances would be isolated and reported. We will continue to monitor SBA's progress toward implementing this recommendation.

Recommendation: The Commissioner of the Social Security Administration should ensure that the CIO of the Social Security Administration (SSA) updates the agency's guidance on assessing IT investments for suitability for cloud computing services to include a requirement to assess existing investments for these services. (Recommendation 33)

Agency: Social Security Administration
Status: Open

Comments: The Social Security Administration (SSA) concurred with our recommendation and reported that the agency would take action to address it. In November 2019, SSA officials provided a copy of the agency's updated guidance but the guidance did not include language that addressed our recommendation. As of May 2020, we have not received a more recent update from SSA regarding its implementation of our recommendation. We will continue to monitor the status of this recommendation.

Recommendation: The Commissioner of the Social Security Administration should ensure that the CIO of SSA completes an assessment of all IT investments for suitability for migration to a cloud computing service, in accordance with OMB guidance. (Recommendation 34)

Agency: Social Security Administration
Status: Open

Comments: The Social Security Administration (SSA) concurred with our recommendation and reported that the agency would take action to address it. In November 2019, SSA officials reported that the agency had completed an assessment of all investments for cloud services. However, our review of the agency's IT Dashboard data in November found that 24 investments remained to be reviewed. As of May 2020, we have not received a more recent update from SSA regarding its implementation of our recommendation. We will continue to monitor the status of this recommendation.

Recommendation: The Commissioner of the Social Security Administration should ensure that the CIO of SSA establishes a consistent and repeatable mechanism to track savings and cost avoidances from the migration and deployment of cloud services. (Recommendation 35)

Agency: Social Security Administration
Status: Open

Comments: The Social Security Administration (SSA) concurred with our recommendation and reported that the agency would take action to address it. In November 2019, SSA officials reported that the agency was working toward implementing a tool that would track cloud savings and avoidances but did not provide a timeframe for when the tool would be finalized. As of May 2020, we have not received a more recent update from SSA regarding its implementation of our recommendation. We will continue to monitor the status of this recommendation.

Recommendation: The Secretary of Energy should take action to educate and communicate the agency's scientific integrity polices to staff through, for example, regular training. (Recommendation 1)

Agency: Department of Energy
Status: Open

Comments: In July 2020, DOE provided an update on the status of this recommendation. In that update, DOE said the scientific integrity official will be responsible for leading and coordinating with other elements of the Department, in the development of measures to educate and communicate DOE's scientific integrity policies to staff.

Recommendation: The Secretary of Energy should establish steps and a time frame for designating a scientific integrity official to oversee the department's scientific integrity activities. (Recommendation 3)

Agency: Department of Energy
Status: Open

Comments: In July 2020, DOE provided an update on the status of this recommendation. In that update, DOE said that it was still in the process of identifying an individual to serve as a scientific integrity official.

Recommendation: The Secretary of Energy should develop mechanisms to regularly monitor and evaluate implementation of the department's scientific integrity policy, including mechanisms to remediate identified deficiencies and make improvements where necessary. (Recommendation 4)

Agency: Department of Energy
Status: Open

Comments: In July 2020, DOE provided an update on the status of this recommendation. In that update, DOE stated that the Department's scientific integrity official will have the responsibility to lead and coordinate with other elements of the Department in developing procedures to monitor and evaluate the implementation of DOE's scientific integrity policy, including mechanisms to remediate identified deficiencies and make improvements where necessary.

Recommendation: The Secretary of Transportation should develop mechanisms to regularly monitor and evaluate implementation of the department's scientific integrity policy, including mechanisms to remediate identified deficiencies and make improvements where necessary. (Recommendation 5)

Agency: Department of Transportation
Status: Open

Comments: In September 2020, the Department of Transportation provided an update on the status of this recommendation. In that update, officials said that DOT was still working on this action. According to officials, the department will implement several mechanisms to address the recommendation, including conducting annual reviews of the scientific integrity policy and making the policy available to all relevant employees. DOT estimated it would complete these actions by the end of March 2021.

Recommendation: The Director of NIST should develop mechanisms to regularly monitor and evaluate implementation of the agency's scientific integrity policy, including mechanisms to remediate identified deficiencies and make improvements where necessary. (Recommendation 6)

Agency: Department of Commerce: National Institute of Standards and Technology
Status: Open

Comments: In Commerce's written comments, NIST had stated that, beginning in fiscal year 2019, the agency would review implementation of its policy at least annually and make recommendations to the Director of NIST as to whether any improvements were needed. In a September 2020 update, NIST provided a memorandum reporting that in fiscal year 2019 the Scientific Integrity Officer and General Counsel had discussed an allegation related to scientific integrity, and that it was determined that programmatic factors, not a lapse in scientific integrity, had occurred. According to NIST, it monitors the effectiveness of the implementation of its documented scientific integrity policy, order, and procedure by means of informal feedback from NIST researchers and supervisors, as documented in the memorandum.

Recommendation: The NOAA Administrator should develop mechanisms to regularly monitor and evaluate implementation of the agency's scientific integrity policy, including mechanisms to remediate identified deficiencies and make improvements where necessary. (Recommendation 7)

Agency: Department of Commerce: National Oceanic and Atmospheric Administration
Status: Open

Comments: In Commerce's written comments, NOAA stated that it will identify additional metrics for monitoring and evaluating its policy. As of October 2020, we have requested an update from the agency but have not yet received information to evaluate implementation of this recommendation.

Recommendation: The Director of USGS should develop mechanisms to regularly monitor and evaluate implementation of the agency's scientific integrity policy, including mechanisms to remediate identified deficiencies and make improvements where necessary. (Recommendation 8)

Agency: U.S. Geological Survey
Status: Open

Comments: In September 2020, the Department of the Interior provided an update on this recommendation. In that update, officials stated that the expected completion date is the end of November 2022.

Recommendation: The Secretary of Energy should develop documented procedures for identifying and addressing alleged violations of its scientific integrity policy. (Recommendation 9)

Agency: Department of Energy
Status: Open

Comments: In July 2020, DOE provided an update on the status of this recommendation. In that update, DOE stated that the department's scientific integrity official will be responsible for leading and coordinating with other elements of the Department in developing procedures for identifying and addressing alleged violations of DOE's scientific integrity policy.

Recommendation: The Administrator of NASA should develop documented procedures for identifying and addressing alleged violations of its scientific integrity policy. (Recommendation 10)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA officials stated that the agency is undergoing additional internal and external reviews-with NASA officials working through the National Science and Technology Council's Joint Committee on Research Environments, which supports scientific security, rigor, and integrity-and that completion of the implementation of the recommendation is due October 31, 2020.

Recommendation: The Secretary of DOL should develop and publish a multi-year strategic research plan for evaluation of its employment and training programs that includes assessing the completeness and results of efforts to coordinate among E&T programs to address overlap and fragmentation. In developing this plan, DOL should also consult with other federal agencies and key stakeholders on ways to address gaps in information on how multiple programs are serving the employment and training needs of specific populations, such as Native Americans, youth, and refugees. (Recommendation 1)

Agency: Department of Labor
Status: Open

Comments: DOL agreed with this recommendation. The agency noted that it actively plans and makes public the research and evaluation topics for these evaluations, but it did not identify a timeline or measures it would take to augment these basic steps. DOL also stated that it will consult with stakeholders regarding the employment and training needs of specific populations. We will consider closing this recommendation when DOL completes these efforts.

Recommendation: Congress should consider taking legislative action to resolve the long-standing issues between the Corps and the Advisory Council on Historic Preservation over the Corps Regulatory Program's procedures for implementing section 106 of the National Historic Preservation Act. (Matter for Consideration 1)

Agency: Congress
Status: Open

Comments: When we determine what steps the Congress has taken, we will provide updated information

Recommendation: The Secretary of Energy should develop a documented policy or clarify existing policy to implement the statutory requirement to consult with Alaska Native Corporations (ANC) on the same basis as Indian tribes under Executive Order 13175. (Recommendation 1)

Agency: Department of Energy
Status: Open

Comments: As of April 2020, the Department of Energy plans to clarify and consolidate its consultation policies and practices for consultation with Alaska Native Corporations by June 2021.

Recommendation: The Administrator of the Environmental Protection Agency should develop a documented policy or clarify existing policy to implement the statutory requirement to consult with ANCs on the same basis as Indian tribes under Executive Order 13175. (Recommendation 2)

Agency: Environmental Protection Agency
Status: Open

Comments: In December 2019, EPA created a draft document, Guiding Principles for Consulting with Alaska Native Claims Settlement Act Corporations, and issued it for consultation with Alaska Native Corporations (ANCs). The draft guiding principles seek to clarify EPA's consultation and coordination practices with ANCs. Additionally, according to agency officials, an EPA working group is in the process of developing an internal, best practices implementation guide. As of April 2020, EPA expects to finalize these guidance documents in 2020

Recommendation: The Secretary of Housing and Urban Development should develop a documented policy or clarify existing policy to implement the statutory requirement to consult with ANCs on the same basis as Indian tribes under Executive Order 13175. (Recommendation 3)

Agency: Department of Housing and Urban Development
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Homeland Security should establish a time frame for developing or updating policy to implement the statutory requirement to consult with ANCs on the same basis as Indian tribes under Executive Order 13175. (Recommendation 5)

Agency: Department of Homeland Security
Status: Open

Comments: In February 2019, the Department of Homeland Security provided GAO documentation supporting a planned time frame of March 2020 for developing and updating its consultation policy to implement the statutory requirement to consult with ANCs in response to this recommendation. We plan to close the recommendation after reviewing documentation that the policy has been updated.

Recommendation: The Assistant to the Secretary of Agriculture for Rural Development should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on proposed infrastructure projects. (Recommendation 6)

Agency: Department of Agriculture: Rural Development
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of Civil Works of the Corps should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 7)

Agency: Department of Defense: Department of the Army: Corps of Engineers: Civil Works
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director for the Bureau of Ocean Energy Management should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 8)

Agency: Department of the Interior: Bureau of Ocean Energy Management
Status: Open

Comments: As of September 2019, Bureau of Ocean Energy Management (BOEM) plans to amend its tribal consultation policy with policies and procedures for communicating with tribes after consultation by December 2020.

Recommendation: The Secretary of Energy should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 10)

Agency: Department of Energy
Status: Open

Comments: As of April 2020, the Department of Energy indicated that it plans to document policies for communicating about how input from tribal consultation was considered in agency decisions on infrastructure projects by June 2021.

Recommendation: The Administrator of the Federal Highway Administration should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 14)

Agency: Department of Transportation: Federal Highway Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Homeland Security should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 16)

Agency: Department of Homeland Security
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Housing and Urban Development should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 17)

Agency: Department of Housing and Urban Development
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Chairman of the Nuclear Regulatory Commission should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 19)

Agency: Nuclear Regulatory Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Transportation should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 20)

Agency: Department of Transportation
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The SBA Administrator or her designee should (1) develop a process for periodically reviewing Federal Procurement Data System-Next Generation (FPDS-NG) data to determine the extent to which agencies are awarding WOSB program set-asides under ineligible North American Industry Classification System (NAICS) codes and (2) take steps to address any issues identified, such as providing targeted outreach or training to agencies making awards under ineligible codes. (Recommendation 1)

Agency: Small Business Administration
Status: Open

Comments: In May 2019, SBA analyzed FPDS-NG data to review the use of ineligible NAICS codes in the WOSB program. SBA officials also noted that they plan to conduct these reviews on an ongoing basis. As part of their May 2019 analysis, SBA identified federal agencies that had used ineligible NAICS codes. As of October 2019, SBA officials said that they were taking steps, including drafting presentation materials, to provide training on NAICS codes to agencies and planned to present quarterly at the Small Business Procurement Advisory Council FY 2020 meetings. SBA officials also noted that they had also provided training on NAICS codes as part of its FY 2019 performance reviews of procurement centers.

Recommendation: The Secretary of Labor should direct its subagencies, other than ETA, to design and implement a process to manage and administer grantees' compliance with the Stevens Amendment, including determining to what extent to provide guidance to grantees on calculations. (Recommendation 1)

Agency: Department of Labor
Status: Open

Comments: In responding to the report, DOL stated that it concurs with the recommendation. DOL's subagency, OSHA, provided written comments and stated that it generally agreed with GAO's recommendation. On March 3, 2020, DOL staff said the agency will provide an update to its response to this recommendation, along with responses to open recommendations from other GAO reports, in several months.

Recommendation: The Secretary of Education should design and implement a process to manage and administer grantees' compliance with the Stevens Amendment, including determining to what extent to provide guidance to grantees on calculations. (Recommendation 3)

Agency: Department of Education
Status: Open

Comments: In a subsequent response to the report, Education stated that it concurred with GAO's recommendation and is considering enhancing its current approach to overseeing compliance with the Stevens Amendment through post-award monitoring activities. On March 9, 2020, an Education Department Official stated that the planned date that work is due to be completed by the applicable program office is 9/30/2020. According to the official, the work will promote consistency across applicable grant programs and enhance their monitoring efforts. The official further stated that Education will develop general monitoring guidance to further check on compliance with the Stevens Amendment for implementation across Education's grantmaking Principal Offices. As a part of monitoring, program offices will be expected to review the Stevens Amendment statutory requirements with grantees and plans to reiterate that grantees are required to disclose for their grant project the percent of the costs financed with federal funds, the federal dollar amount, and the percentage and dollar amount financed by nongovernmental funds when issuing statements, press releases, bid solicitations, and other documents describing their grant project. Education also plans to remind grantees that they must document how the dollar amounts and percentages were calculated in the disclosures and maintain this documentation with their grant file. We will update the action taken in response to this recommendation when further action is confirmed.

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Secretary of Agriculture should take steps to review the assignment of the "000" code to any positions in the department in the 2210 IT management occupational series and assign the appropriate National Initiative for Cybersecurity Education (NICE) framework work role codes. (Recommendation 1)

Agency: Department of Agriculture
Status: Open
Priority recommendation

Comments: The Department of Agriculture concurred with our recommendation and stated that it was identifying an internal team of subject-matter experts to collaborate with organizations across the department to review the assignment of the "000" code to positions and assist in determining the appropriate work role codes. As of April 2020, USDA expected to complete this activity by fall 2020. To fully implement this recommendation, USDA will need to provide evidence that it has assigned appropriate NICE framework work role codes to its positions in the 2210 IT management occupational series.

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Secretary of Commerce should take steps to review the assignment of the "000" code to any positions in the department in the 2210 IT management occupational series and assign the appropriate NICE framework work role codes. (Recommendation 2)

Agency: Department of Commerce
Status: Open
Priority recommendation

Comments: The Department of Commerce concurred with the recommendation, but as of January 2020, it had not yet provided sufficient evidence that it had implemented the recommendation. We will continue to monitor the situation.

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Secretary of Defense should complete the identification and coding of vacant positions in the department performing IT, cybersecurity, or cyber-related functions. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: The Department of Defense concurred with the recommendation but as of January 2020, it had not yet provided sufficient evidence that it had implemented the recommendation. We will continue to monitor the situation.

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Secretary of Defense should take steps to review the assignment of the "000" code to any positions in the department in the 2210 IT management occupational series, assign the appropriate NICE framework work role codes, and assess the accuracy of position descriptions. (Recommendation 4)

Agency: Department of Defense
Status: Open
Priority recommendation

Comments: The Department of Defense concurred with the recommendation. As of January 2020, it had not yet provided sufficient evidence that it had implemented the recommendation. To fully implement this recommendation, DOD will need to provide evidence that it has assigned appropriate National Initiative for Cybersecurity Education framework work role codes to its positions in the 2210 Information Technology management occupational series and assessed the accuracy of position descriptions.

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Secretary of Health and Human Services should take steps to review the assignment of the "000" code to any positions in the department in the 2210 IT management occupational series and assign the appropriate NICE framework work role codes. (Recommendation 8)

Agency: Department of Health and Human Services
Status: Open
Priority recommendation

Comments: The Department of Health and Human Services concurred with the recommendation and stated that it would complete a review of the assignment of the "000" code to its positions in the 2210 IT management occupational series and assign the appropriate NICE framework work role codes. As of March 2020, HHS has made significant progress toward reviewing the assignment of work role codes to its positions in the 2210 IT management occupational series and ensuring that such positions are not coded with the "000" code. To fully implement this recommendation, HHS will need to provide evidence that it has assigned the appropriate NICE framework work role codes to all or nearly all of its remaining positions in the 2210 IT management occupational series. We will continue to monitor the situation.

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Secretary of Homeland Security should take steps to review the assignment of the "000" code to any positions in the department in the 2210 IT management occupational series, assign the appropriate NICE framework work role codes, and assess the accuracy of position descriptions. (Recommendation 9)

Agency: Department of Homeland Security
Status: Open
Priority recommendation

Comments: The Department of Homeland Security (DHS) concurred with our recommendation. DHS conducted an audit of its components' cybersecurity coding efforts in fiscal year 2018 and identified actions that components needed to take to complete the assignment of appropriate NICE framework work role codes and assess the accuracy of position descriptions; a second audit for fiscal year 2019 is underway, and the department expects to complete its coding efforts by December 2020. As of January 2020, DHS has not yet provided sufficient evidence to demonstrate that it has implemented this recommendation. To fully implement this recommendation, DHS will need to provide evidence that it has assigned appropriate NICE framework work role codes to its positions in the 2210 IT management occupational series and assessed the accuracy of position descriptions.

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Secretary of Housing and Urban Development should take steps to review the assignment of the "000" code to any positions in the department in the 2210 IT management occupational series and assign the appropriate NICE framework work role codes. (Recommendation 10)

Agency: Department of Housing and Urban Development
Status: Open
Priority recommendation

Comments: The Department of Housing and Urban Development (HUD) agreed with this recommendation. In January 2020, HUD stated that it was in the process of reviewing its positions in the 2210 IT management occupational series and assigning appropriate work role codes. To fully implement this recommendation, HUD will need to correctly categorize the work roles and functions performed by IT and cyber-related personnel in order to be able to identify critical cybersecurity staffing needs.

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Secretary of State should take steps to review the assignment of the "000" code to any positions in the department in the 2210 IT management occupational series, assign the appropriate NICE framework work role codes, and assess the accuracy of position descriptions. (Recommendation 15)

Agency: Department of State
Status: Open
Priority recommendation

Comments: The Department of State concurred with the recommendation. In January 2020, we confirmed that State had assigned National Initiative for Cybersecurity Education (NICE) framework work role codes to its positions in the 2210 IT management occupational series. However, the department has not yet provided sufficient evidence to demonstrate that it has completed its efforts to assess the accuracy of position descriptions. To fully implement this recommendation, State will need to provide evidence that it has assessed the accuracy of position descriptions.

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Secretary of Treasury should take steps to review the assignment of the "000" code to any positions in the department in the 2210 IT management occupational series and assign the appropriate NICE framework work role codes. (Recommendation 17)

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: Treasury partially concurred with the recommendation and stated that some positions may not align to work roles in the National Initiative for Cybersecurity Education's (NICE) cybersecurity workforce framework. Treasury stated that it planned to review and validate the work role codes of its IT, cybersecurity, or cyber-related positions by March 2019. However, as of February 2020 Treasury had not provided evidence that it has implemented our recommendation. Until it assigns work role codes that are consistent with the IT, cybersecurity, and cyber-related functions performed by these positions, Treasury will continue to have unreliable information about its cybersecurity workforce that the department will need to identify its workforce roles of critical need.

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Administrator of the Environmental Protection Agency should complete the identification and coding of vacant positions in the agency performing IT, cybersecurity, or cyber-related functions. (Recommendation 19)

Agency: Environmental Protection Agency
Status: Open

Comments: The Environmental Protection Agency concurred with the recommendation but as of January 2020, it had not yet provided sufficient evidence that it had implemented the recommendation. We will continue to monitor the situation.

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Administrator of the Environmental Protection Agency should take steps to review the assignment of the "000" code to any positions in the agency in the 2210 IT management occupational series, assign the appropriate NICE framework work role codes, and assess the accuracy of position descriptions. (Recommendation 20)

Agency: Environmental Protection Agency
Status: Open
Priority recommendation

Comments: The Environmental Protection Agency concurred with the recommendation and stated that it would complete a review of the assignment of the "000" code to its positions in the 2210 IT management occupational series, assign the appropriate NICE framework work role codes, and assess the accuracy of position descriptions. As of January 2020, EPA has not yet provided sufficient evidence to demonstrate that it has implemented this recommendation. To fully implement this recommendation, EPA will need to provide evidence that it has assigned appropriate NICE framework work role codes to its positions in the 2210 IT management occupational series and assessed the accuracy of position descriptions.

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Administrator of the National Aeronautics and Space Administration should complete the identification and coding of vacant positions at NASA performing IT, cybersecurity, or cyber-related functions. (Recommendation 23)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: The National Aeronautics and Space Administration did not concur with the recommendation. As of January 2020, it had not yet provided sufficient evidence that it had implemented the recommendation. We will continue to monitor the situation.

Recommendation: To complete the appropriate assignment of codes to their positions performing IT, cybersecurity, or cyber-related functions, in accordance with the requirements of the Federal Cybersecurity Workforce Assessment Act of 2015, the Administrator of the National Aeronautics and Space Administration should take steps to review the assignment of the "000" code to any positions at NASA in the 2210 IT management occupational series, assign the appropriate NICE framework work role codes, and assess the accuracy of position descriptions. (Recommendation 24)

Agency: National Aeronautics and Space Administration
Status: Open
Priority recommendation

Comments: The National Aeronautics and Space Administration (NASA) concurred with our recommendation and stated that it would complete a review of the assignment of the "000" code to its positions in the 2210 IT management occupational series, assign the appropriate NICE framework work role codes, and assess the accuracy of position descriptions. In March 2020, NASA indicated that it expected to implement the recommendation by September 30, 2020. To fully implement this recommendation, NASA will need to provide evidence that it has assigned appropriate NICE framework work role codes to its positions in the 2210 IT management occupational series and assessed the accuracy of position descriptions.

Recommendation: OMB's Shared Services Policy Officer should work with GSA to finalize a plan for monitoring the implementation of NewPay. The plan should include:
• implementation goals, a timeline, and milestones for agencies to transition from one provider to another;
• transparent reporting mechanisms on key milestones; and
• a process for capturing and communicating lessons learned.
(Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: OMB staff did not agree or disagree with GAO's March 2019 recommendation. As of January 2020, OMB had not addressed this recommendation. According to OMB staff, they are still deliberating goals and milestones for NewPay. In addition, OMB is working on a knowledge library to capture lessons learned for shared services initiatives. However, OMB staff did not provide a timeline for when they will complete these efforts. Without a detailed monitoring plan that includes goals, transparent reporting mechanisms on key milestones, and a process for capturing and communicating lessons learned, it will be more difficult for OMB and GSA to provide oversight of the transition and its effects on providers and customers, including whether there are interruptions to delivery of services. Additionally, this information could help OMB and GSA avoid gaps in service or costly delays as agencies transition to the new model for obtaining payroll and work management services.

Recommendation: OMB's Shared Services Policy Officer should work with GSA to document key roles and responsibilities, including which agency will be the NewPay Service Management Offices (SMO), who will be assigned to the NewPay Task Order Review Board, how the SMO, the Review Board, and other key stakeholders will work together, and which agency will be responsible for interpreting payroll rules and regulations. (Recommendation 2)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: OMB staff did not agree or disagree with GAO's March 2019 recommendation. As of January 2020, OMB had taken some steps to address this recommendation. OMB designated GSA as the Quality Service Management Office (QSMO) for NewPay. As QSMO, GSA will be responsible for managing the payroll marketplace. However, OMB has not documented how GSA and other key stakeholders will work together. For example, OMB has not documented which agency will review and approve task orders. Until OMB and GSA clearly identify, communicate, and document key roles and responsibilities, they run the risk of not achieving their objectives. They also risk repeating past problems associated with the delivery of shared services, such as the inconsistent implementation and interpretation of standards and migrations that encounter costly delays should agencies not follow available guidance.

Recommendation: OMB's Shared Services Policy Officer should work with GSA to update provider information on services offered, pricing, and performance and share that information with prospective customers. (Recommendation 3)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: OMB staff did not agree or disagree with GAO's March 2019 recommendation. As of January 2020, OMB had not addressed this recommendation. Without up-to-date information on providers -- such as the services OMB and GSA plan to offer, their level of performance, and their costs -- it will be time- consuming and difficult for potential customers to compare providers. This lack of information could slow the rate of shared services adoption.

Recommendation: OMB's Shared Services Policy Officer should work with GSA to implement a process for collecting and tracking cost-savings data that would allow them to assess progress toward the shared services cost-savings goal of an estimated $2 billion over 10 years. (Recommendation 4)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: OMB staff did not agree or disagree with GAO's March 2019 recommendation. As of January 2020, OMB had not addressed this recommendation. According to OMB officials, OMB will collect cost-savings data via the integrated data collection process, which requires agencies to publicly post their cost savings and avoidance data. However, OMB has not demonstrated how it plans to use data from the IT Integrated Data Collection Instrument to track cost savings specifically related to shared services overall and for individual projects. Until OMB and GSA finalize a plan for collecting the needed data and evidence to effectively measure cost-savings goals, it will be difficult to demonstrate progress -- a recurring challenge associated with previous shared services efforts.

Recommendation: The Secretary of Labor should direct the Bureau of Labor Statistics (BLS) and the Employment and Training Administration (ETA) to develop ways to use existing or new data collection efforts to identify and systematically track the workforce effects of advanced technologies. For example, the Secretary could select any of the following possibilities, or could identify others.
• BLS could expand existing worker or firm surveys to ask respondents whether advanced technologies have resulted in worker displacements, work hour reductions, or substantial adjustments to work tasks.
• BLS could expand its employment projections work to regularly identify occupations projected to change over time due to advanced technologies.
• ETA could expand the O*NET data system to identify changes to skills, tasks, and tools associated with occupations, as the information is updated on its rotational basis, and consider how this could be used to track the spread of advanced technologies.
(Recommendation 1)

Agency: Department of Labor
Status: Open
Priority recommendation

Comments: DOL agreed with this recommendation. DOL stated that it will continue coordinating with the Census Bureau on research activities in this area, and plans to identify and recommend data collection options to fill gaps in existing information about how the workplace is affected by new technologies, automation, and AI. In February 2020, DOL's Bureau of Labor Statistics (BLS) issued a public report evaluating data gaps and providing recommendations for data collection options. In June 2020, DOL reported that BLS plans to host a seminar to discuss the report findings and potential pilot data collection options. DOL also plans to release its first annual employment projections data in September 2020 (previously released every 2 years). In addition, DOL reported that the Employment and Training Administration has undertaken three research efforts, which are still underway, to test ways to analyze O*NET data elements for their potential to track changes in occupations over time and to flag areas for further study on the workforce effects of automation. This recommendation will be implemented when DOL completes more of its activities.

Recommendation: The Director of OMB should make available more disaggregated data on fees, fines, and penalties that it maintains in its OMB MAX database. For example, OMB could report data on fee collections by agency in Analytical Perspectives. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: The Office of Management and Budget (OMB) did not provide comments on our draft report and therefore neither agreed nor disagreed with this recommendation. As of October 2020, OMB had not provided evidence of any actions taken to implement this recommendation.

Recommendation: The Director of OMB should instruct agencies to regularly review the application of the user fee designation in the OMB MAX data and update the designation, as needed, to meet the criteria in OMB Circular No. A-11. (Recommendation 3)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: OMB did not provide comments on our draft report and therefore neither agreed nor disagreed with this recommendation. As of October 2020, OMB had not provided evidence of any actions taken to implement this recommendation.

Recommendation: The Secretary of State should ensure that the Director of the Office of U.S. Foreign Assistance Resources provides missions with guidance that clearly documents the department's process for climate change risk assessments for integrated country strategies. (Recommendation 1)

Agency: Department of State
Status: Open

Comments: As of January 2020, the Department of State has revised its integrated country strategy guidance to inform posts that they have the option to include a climate risk assessment annex when they change or update their strategies. State noted that they plan to disseminate this guidance to posts in 2020.

Recommendation: The Commandant of the U.S. Coast Guard should direct the chair of the Interagency Coordinating Committee on Oil Pollution Research, in coordination with member agencies, to systematically review its membership to determine whether any additional agencies should be involved in coordinating oil spill research and that the most appropriate offices within member agencies are represented. (Recommendation 1)

Agency: Department of Homeland Security: United States Coast Guard
Status: Open

Comments: In October 2020, the U.S. Coast Guard informed GAO that the Interagency Coordinating Committee on Oil Pollution Research (ICCOPR) review of non-member agencies was complete and that the formal process to invite the U.S. Geological Survey (USGS) for membership has been initiated. To formalize membership, a majority of current ICCOPR members must approve USGS by vote, which is expected. This will be followed by a letter of invitation from the Coast Guard Commandant to USGS making the membership official.

Recommendation: The Commandant of the U.S. Coast Guard should direct the chair of the Interagency Coordinating Committee on Oil Pollution Research, in coordination with member agencies, to coordinate with the relevant Natural Resource Damage Assessment trustee councils to help ensure that the interagency committee's research informs and supports the councils' damage assessment and restoration efforts. (Recommendation 2)

Agency: Department of Homeland Security: United States Coast Guard
Status: Open

Comments: In October 2020, the Coast Guard informed GAO that the ICCOPR FY 2022-2027 Research and Technology Plan will include a process to engage Natural Resource Damage Assessment (NRDA) trustees. Once updated and finalized, ICCOPR will execute this plan to coordinate with the NRDA trustee councils.

Recommendation: The Director of OMB should determine a government-wide baseline level of progress in meeting physical access control system requirements, including implementation of GSA-approved systems, and should monitor progress in meeting these requirements. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: In August 2019, GAO contacted OMB to determine if any progress has been made implementing this recommendation. GAO is awaiting OMB's response.

Recommendation: The Secretary of Homeland Security should direct the ISC, in collaboration with member agencies, to assess the extent of, and develop strategies to address, government-wide challenges to implementing physical access control systems. (Recommendation 2)

Agency: Department of Homeland Security
Status: Open

Comments: In August 2019, GAO learned that DHS has recently completed the "Physical Access Control System (PACS) Modernization Working Group Charter." This charter was created under the direction of the Co-Chairs of the Federal Chief Information Security Officer Council, Identity, Credentialing and Access Management Subcommittee, and the Program Director of the DHS Interagency Security Committee. The purpose of the PACS Modernization Working Group is to facilitate the implementation and use of the technology and processes related to modernizing electronic-PACS within the federal government, thereby increasing security, coordination, and compliance with national-level policies and standards. GAO is following up with DHS to obtain additional information about this effort and to determine whether it addresses this recommendation.

Recommendation: The Secretary of DHS should direct the appropriate staff to work with OMB to follow up with agencies to identify obstacles and impediments affecting their abilities to implement intrusion detection and prevention capabilities. (Recommendation 2)

Agency: Department of Homeland Security
Status: Open

Comments: DHS provided evidence in December 2019 but it was insufficient to close this recommendation. We will continue to follow-up with DHS.

Recommendation: The Director of OMB should submit the intrusion assessment plan to the appropriate congressional committees. (Recommendation 3)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: As of January 2020, the Office of Management and Budget has not provided sufficient evidence to close this recommendation. We will continue to follow-up with OMB.

Recommendation: The Director of OMB should report on implementation of the defense-in-depth strategy described in the intrusion assessment plan, including all elements described in the plan. (Recommendation 4)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: As of January 2020, the Office of Management and Budget has not provided sufficient evidence to close this recommendation. We will continue to follow-up with OMB.

Recommendation: The Director of OMB should update the analysis of agencies' intrusion detection and prevention capabilities to include the degree to which agencies are using NCPS. (Recommendation 5)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: As of January 2020, the Office of Management and Budget has not provided sufficient evidence to close this recommendation. We will continue to follow-up with OMB.

Recommendation: The Director of OMB should direct the Federal CIO to update her report to Congress to include required information, such as detecting advanced persistent threats, a comparison of the costs and benefits of the capabilities versus commercial technologies and tools, and the capability of agencies to protect sensitive cyber threat indicators and defense measures. (Recommendation 6)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: As of January 2020, the Office of Management and Budget has not provided sufficient evidence to close this recommendation. We will continue to follow-up with OMB.

Recommendation: The Director of OMB should direct the Federal CIO to work with DHS to follow-up with agencies to identify obstacles and impediments affecting their abilities to implement intrusion detection and prevention capabilities. (Recommendation 9)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: As of January 2020, the Office of Management and Budget has not provided sufficient evidence to close this recommendation. We will continue to follow-up with OMB.

Recommendation: The Director of the Office of Management and Budget should instruct the Office of Federal Procurement Policy: (1) To facilitate additional training to improve the understanding of the contracting workforce regarding the Buy American Act requirements; and (2) To facilitate clarifying revisions to FPDS-NG, where needed, and provide training and guidance for recording Buy American Act information in FPDS-NG to improve the accuracy of the Buy American data. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: The Office of Federal Procurement Policy (OFPP) within OMB concurred with our recommendation, noting that it plans to coordinate with federal agencies on the extent to which they have developed training and guidance. Based on this information, OFPP will work with agencies to determine the most appropriate course of action to address gaps, if any. As of August 2020, OFPP stated that it had not taken any additional actions to implement the recommendation because it is currently focused on implementing Executive Order 13881 "Maximizing Use of American-Made Goods, Products and Materials".

Recommendation: The Secretary of Veterans Affairs should clarify existing guidance, or provide training or other instruction, to help contracting officials: (1) Address the applicability of the Buy American Act requirements and provide instruction on how to implement the requirements, including in any training developed to implement the Veterans First policy; (2) Identify the factors that should be considered in order to determine the applicability of the Trade Agreements Act and waiver of the Buy American Act; and (3) Identify sources of information available for determining products' origins and the steps they should take to verify information that is inconsistent. (Recommendation 3)

Agency: Department of Veterans Affairs
Status: Open

Comments: The Department of Veterans Affairs (VA) concurred and has since taken action to address some of our three-part recommendation. For example, VA revised its "Procurement Policy Memorandum 2017-12", on April 9, 2019, to better clarify its existing Buy American Act guidance and highlight key factors contracting staff should consider when determining the applicability of Buy American Act exceptions and waivers. Additionally, in October 2019, VA provided GAO briefing slides for a new training to be offered at the agency's acquisition academy that includes specific instruction pertaining to the use of Buy American Act exceptions and waivers. However, VA has yet to address our recommendation that the agency clarify guidance or provide training to help contracting officers identify sources of information regarding product origin and the steps to be taken to verify inconsistent product origin information. We plan to keep this recommendation open until VA implements guidance or training of this nature and we are able to assess the extent to which it fully addresses our recommendation.

Recommendation: The Secretary of Health and Human Services should provide guidance, training, or other instruction to help contracting officials: (1) Identify the factors that should be considered in order to determine the applicability of the Trade Agreements Act and waiver of the Buy American Act; (2) Document determinations of the use of Buy American exceptions for domestic non-availability and ensure the required approvals are obtained; and (3) Identify sources of information available for determining products' origins and the steps they should take to verify information that is inconsistent. (Recommendation 4)

Agency: Department of Health and Human Services
Status: Open

Comments: HHS concurred with this recommendation and has taken steps to implement it. HHS issued a memorandum in February 2019 requiring all contracting officers as part of their continuous learning program to complete the Buy American Statute course, FAC063, offered by the Federal Acquisition Institute. As of February 2020, about 90 percent of contracting officials had taken the required training. However, due to its COVID-19 Pandemic response activities, HHS stated that all of its contracting officials had not completed the training as intended. HHS also developed checklists and guidance related to the Buy American Act and Trade Agreements Act. We plan to keep this recommendation open until HHS completes its training initiative.

Recommendation: The Director of OMB should enhance the guidelines for agencies to establish the controls required by FRDAA, by clarifying the difference between FRDAA and ERM requirements, and through collaboration with agencies to determine what additional information agencies need to implement the controls. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: In March 2020, the Payment Integrity Information Act of 2019 (PIIA) was enacted to improve efforts to identify and reduce government-wide improper payments, including payments that are the result of fraud. PIIA repealed and replaced FRDAA. However, OMB and the other agencies subject to PIIA essentially must satisfy the same requirements established under FRDAA, including adhering to OMB's related guidelines. OMB has not updated its published guidelines for FRDAA as we recommended. If OMB takes additional actions to supplement guidelines under PIIA, we will review the guidelines to determine whether it addresses our recommendation.

Recommendation: The Director of OMB should enhance FRDAA reporting guidelines by directing agencies to report complete and detailed information on each of the reporting elements specified by FRDAA, which should include information related to financial and nonfinancial fraud. (Recommendation 2)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: In March 2020, the Payment Integrity Information Act of 2019 (PIIA) was enacted to improve efforts to identify and reduce government-wide improper payments, including payments that are the result of fraud. PIIA repealed and replaced FRDAA, but maintained similar reporting requirements for federal agencies regarding fraud risks and also extended the time line for reporting by a year. OMB did not update its previous reporting guidance for FRDAA as we recommended. If OMB takes additional actions to supplement reporting guidelines under PIIA, we will review the guidelines to determine whether it addresses our recommendation.

Recommendation: The Administrator of General Services should take steps to improve agency-wide monitoring of exchange/sale activities within GSA by specifying the Office of Administrative Services' responsibilities and by defining the scope of its authority. (Recommendation 2)

Agency: General Services Administration
Status: Open

Comments: As of February 2020, GSA developed and distributed a Standard Operating Procedure that established the Office of Administrative Services as having jurisdiction and program oversight for all internal agency exchange/sale transactions. GSA's Office of Administrative Services had also taken steps to coordinate with other GSA offices to coordinate annual exchange/sale data reporting for the agency. We will continue to monitor GSA's actions in addressing the recommendation.

Recommendation: The VA's Deputy Assistant Secretary of Acquisition and Logistics, in collaboration with the Veterans Health Administration's Office of Procurement and Logistics, should revise VA's policy to include details on the exchange/sale authority, particularly those related to monitoring by Regional Offices and use of the authority for medical centers, and establish time frames with milestones for communicating such information. (Recommendation 3)

Agency: Department of Veterans Affairs
Status: Open

Comments: As of February 2020, VA's Office of Acquisition and Logistics, in conjunction with Veterans Health Administration's Procurement and Logistics Office, was working on updating the status of two policy notices to amend existing policy to include details on the exchange/sale authority and to collect data on exchange/sale usage within the agency as a basis for reviewing progress and compliance with VA utilization officers. We will continue to monitor the status of VA's actions to address our recommendation.

Recommendation: The Director of OMB should take steps to improve existing information on federal asset management to reflect leading practices such as those described in ISO 55000 and the key characteristics we identified and make it readily available to federal agencies. These steps could include updating asset management guidance and developing a clearinghouse of information on asset management practices and successful agency experiences. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: As of September 2020, OMB has developed guidance to help federal agencies implement the capital planning requirements described in OMB's November 6, 2019 Memorandum 20-3, "Implementation of Agency-wide Real Property Capital Planning." According to OMB officials, this guidance was distributed to agencies in July 2020. Agency plans were due to OMB by August 15,2020. This recommendation remains open pending further information from OMB on the status and contents of these plans.

Recommendation: The SBA Administrator or her designee should complete the design and implementation of a comprehensive evaluation of the Small Business Procurement Scorecard aligned with key attributes of effective program evaluations to assess the effectiveness of the revised scorecard in measuring agency performance and promoting small business procurement opportunities. (Recommendation 1)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The SBA Administrator or her designee should institute a process to review Small Business Procurement Scorecards for accuracy prior to publication and a mechanism for publicly identifying when issued scorecards have been revised. (Recommendation 2)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: As the Subcommittee on Quantum Information Science (QIS Subcommittee) moves forward, the Office of Science and Technology Policy co-chair, in coordination with other co-chairs and participating agency officials, should take steps to fully implement leading practices that enhance and sustain collaboration. (Recommendation 1)

Agency: Executive Office of the President: Office of Science and Technology Policy
Status: Open

Comments: The Office of Science and Technology Policy (OSTP) agreed with GAO's September 2018 recommendation despite expressing some concerns about required resources and, as of January 2020, had taken steps to work with the other co-chairs of the National Science and Technology Council's Quantum Information Science (QIS) Subcommittee to begin implementing it. The QIS Subcommittee, created pursuant to the National Quantum Initiative Act, enacted in 2018, continues to be led by four co-chairs from the Department of Commerce's National Institute of Standards and Technology, Department of Energy, National Science Foundation (NSF), and OSTP. The law requires, among other things, that the QIS Subcommittee develop a 5-year Strategic Plan by December 21, 2019. In January 2020, an NSF official and OSTP staff reported that a draft strategic plan was under review. According to the NSF official, the strategic plan will include an assessment of actions the agencies are taking in support of QIS, and, in particular, the degree to which the agencies have developed mechanisms that enhance and sustain collaboration. The official said the draft plan will be submitted to the National Quantum Initiative Advisory Committee, which conducts independent assessments of and advises the President and QIS Subcommittee on matters related to the National Quantum Initiative. The NSF official reported that the membership of the Advisory Committee will be announced in the spring 2020 timeframe, at which time it will begin its review of the draft strategic plan. In addition to the development of a strategic plan, the National Quantum Initiative Act called for the establishment of a National Quantum Coordination Office to support the QIS Subcommittee, which OSTP formed in March 2019. Following this, in Oct. 2019, the QIS Subcommittee created three interagency working groups: (1) the science working group is working to coordinate the scientific and technical aspects of programs; (2) the workforce, infrastructure, and industry working group is working to identify workforce and technology needs; and (3) the end-user group is working to connect the nation's research and development community, including academics and industry players, to potential early adopters in the federal government. Taking this action will help to enhance and strengthen interagency collaboration and could help ensure that agencies effectively marshal their efforts to maintain U.S. competitiveness in quantum computing. When the strategic plan is finalized and we confirm what additional actions the QIS Subcommittee has taken to fully implement leading practices that enhance and sustain collaboration, we will provide updated information.

Recommendation: As the QIS Subcommittee moves forward, the Department of Commerce co-chair, in coordination with other co-chairs and participating agency officials, should take steps to fully implement leading practices that enhance and sustain collaboration. (Recommendation 2)

Agency: Department of Commerce
Status: Open

Comments: The Department of Commerce agreed with GAO's September 2018 recommendation and, as of January 2020, had taken steps to work with the other co-chairs of the National Science and Technology Council's Quantum Information Science (QIS) Subcommittee to begin implementing it. The QIS Subcommittee, created pursuant to the National Quantum Initiative Act, enacted in 2018, continues to be led by four co-chairs from the Department of Commerce's National Institute of Standards and Technology, Department of Energy, National Science Foundation (NSF), and OSTP. The law requires, among other things, that the QIS Subcommittee develop a 5-year Strategic Plan by December 21, 2019. In January 2020, an NSF official and OSTP staff reported that a draft strategic plan was under review. According to the NSF official, the strategic plan will include an assessment of actions the agencies are taking in support of QIS, and, in particular, the degree to which the agencies have developed mechanisms that enhance and sustain collaboration. The official said the draft plan will be submitted to the National Quantum Initiative Advisory Committee, which conducts independent assessments of and advises the President and QIS Subcommittee on matters related to the National Quantum Initiative. The NSF official reported that the membership of the Advisory Committee will be announced in the spring 2020 timeframe, at which time it will begin its review of the draft strategic plan. In addition to the development of a strategic plan, the National Quantum Initiative Act called for the establishment of a National Quantum Coordination Office to support the QIS Subcommittee, which OSTP formed in March 2019. Following this, in Oct. 2019 the QIS Subcommittee created three interagency working groups: (1) the science working group is working to coordinate the scientific and technical aspects of programs; (2) the workforce, infrastructure, and industry working group is working to identify workforce and technology needs; and (3) the end-user group is working to connect the nation's research and development community, including academics and industry players, to potential early adopters in the federal government. Taking this action will help to enhance and strengthen interagency collaboration and could help ensure that agencies effectively marshal their efforts to maintain U.S. competitiveness in quantum computing. When the strategic plan is finalized and we confirm what additional actions the QIS Subcommittee has taken to fully implement leading practices that enhance and sustain collaboration, we will provide updated information.

Recommendation: As the QIS Subcommittee moves forward, the Department of Energy co-chair, in coordination with other co-chairs and participating agency officials, should take steps to fully implement leading practices that enhance and sustain collaboration. (Recommendation 3)

Agency: Department of Energy
Status: Open

Comments: The Department of Energy agreed with GAO's September 2018 recommendation and, as of January 2020, had taken steps to work with the other co-chairs of the National Science and Technology Council's Quantum Information Science (QIS) Subcommittee to begin implementing it. The QIS Subcommittee, created pursuant to the National Quantum Initiative Act, enacted in 2018, continues to be led by four co-chairs from the Department of Commerce's National Institute of Standards and Technology, Department of Energy, National Science Foundation (NSF), and OSTP. The law requires, among other things, that the QIS Subcommittee develop a 5-year Strategic Plan by December 21, 2019. In January 2020, an NSF official and OSTP staff reported that a draft strategic plan was under review. According to the NSF official, the strategic plan will include an assessment of actions the agencies are taking in support of QIS, and, in particular, the degree to which the agencies have developed mechanisms that enhance and sustain collaboration. The official said the draft plan will be submitted to the National Quantum Initiative Advisory Committee, which conducts independent assessments of and advises the President and QIS Subcommittee on matters related to the National Quantum Initiative. The NSF official reported that the membership of the Advisory Committee will be announced in the spring 2020 timeframe, at which time it will begin its review of the draft strategic plan. In addition to the development of a strategic plan, the National Quantum Initiative Act called for the establishment of a National Quantum Coordination Office to support the QIS Subcommittee, which OSTP formed in March 2019. Following this, in Oct. 2019 the QIS Subcommittee created three interagency working groups: (1) the science working group is working to coordinate the scientific and technical aspects of programs; (2) the workforce, infrastructure, and industry working group is working to identify workforce and technology needs; and (3) the end-user group is working to connect the nation's research and development community, including academics and industry players, to potential early adopters in the federal government. Taking this action will help to enhance and strengthen interagency collaboration and could help ensure that agencies effectively marshal their efforts to maintain U.S. competitiveness in quantum computing. When the strategic plan is finalized and we confirm what additional actions the QIS Subcommittee has taken to fully implement leading practices that enhance and sustain collaboration, we will provide updated information.

Recommendation: As the QIS Subcommittee moves forward, the National Science Foundation co-chair, in coordination with other co-chairs and participating agency officials, should take steps to fully implement leading practices that enhance and sustain collaboration. (Recommendation 4)

Agency: National Science Foundation
Status: Open

Comments: The National Science Foundation agreed with GAO's September 2018 recommendation and, as of January 2020, had taken steps to work with the other co-chairs of the National Science and Technology Council's Quantum Information Science (QIS) Subcommittee to begin implementing it. The QIS Subcommittee, created pursuant to the National Quantum Initiative Act, enacted in 2018, continues to be led by four co-chairs from the Department of Commerce's National Institute of Standards and Technology, Department of Energy, National Science Foundation (NSF), and OSTP. The law requires, among other things, that the QIS Subcommittee develop a 5-year Strategic Plan by December 21, 2019. In January 2020, an NSF official and OSTP staff reported that a draft strategic plan was under review. According to the NSF official, the strategic plan will include an assessment of actions the agencies are taking in support of QIS, and, in particular, the degree to which the agencies have developed mechanisms that enhance and sustain collaboration. The official said the draft plan will be submitted to the National Quantum Initiative Advisory Committee, which conducts independent assessments of and advises the President and QIS Subcommittee on matters related to the National Quantum Initiative. The NSF official reported that the membership of the Advisory Committee will be announced in the spring 2020 timeframe, at which time it will begin its review of the draft strategic plan. In addition to the development of a strategic plan, the National Quantum Initiative Act called for the establishment of a National Quantum Coordination Office to support the QIS Subcommittee, which OSTP formed in March 2019. Following this, in Oct. 2019 the QIS Subcommittee created three interagency working groups: (1) the science working group is working to coordinate the scientific and technical aspects of programs; (2) the workforce, infrastructure, and industry working group is working to identify workforce and technology needs; and (3) the end-user group is working to connect the nation's research and development community, including academics and industry players, to potential early adopters in the federal government. Taking this action will help to enhance and strengthen interagency collaboration and could help ensure that agencies effectively marshal their efforts to maintain U.S. competitiveness in quantum computing. When the strategic plan is finalized and we confirm what additional actions the QIS Subcommittee has taken to fully implement leading practices that enhance and sustain collaboration, we will provide updated information.

Recommendation: As the Interagency Working Group on Synthetic Biology moves forward, the Director of the National Science Foundation, in coordination with participating agency officials, should take steps to fully implement leading practices that enhance and sustain collaboration. (Recommendation 5)

Agency: National Science Foundation
Status: Open

Comments: The National Science Foundation (NSF) agreed with GAO's September 2018 recommendation and, as of January 2020, had taken some steps to implement it. In November 2018, the Interagency Working Group on Synthetic Biology was formally established under the Biological Sciences Subcommittee of the National Science and Technology Council. The co-chairs of the Interagency Working Group on Synthetic Biology are officials from the National Institutes of Health, the National Institute of Standards and Technology, and NSF. The charter for the working group states that the group is to facilitate coordination and collaboration across 16 federal agencies. In October 2019, the working group hosted an Interagency Synthetic Biology Workshop to examine a roadmap that included basic science, enabling technologies, infrastructure and workforce needs in the area of synthetic biology. The workshop included 100 participants across the federal government, academia and industry, according to NSF officials. On the final day of the workshop participants from federal agencies used the input from the workshop to prepare a list of priority areas for investment along with agencies interested in participating in those priority areas. In January 2020, NSF officials reported that among the next steps for the working group was to develop a federal strategic roadmap for synthetic biology. Officials also reported that the working group is actively preparing a memorandum of understanding to create policies that will enable more sharing of information and collaboration. Taking this action will help to enhance and strengthen interagency collaboration and could help ensure that agencies effectively marshal their efforts to maintain U.S. competitiveness in synthetic biology. When we confirm what additional actions the working group has taken to fully implement leading practices that enhance and sustain collaboration, we will provide updated information.

Recommendation: The Director of OMB, working with CFOC, should (1) collect data metrics regularly on the Career Roadmap Builder online tool and Grants Training 101 to determine how widely the resources are being used, and (2) obtain periodic feedback from federal agencies on the usefulness of these tools and any needed improvements. (Recommendation 2)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: OMB staff provided us with oral comments stating that the agency partially concurred with our recommendations. For our second recommendation, OMB agreed that user feedback data regarding the Career Roadmap Builder and Grants Training 101 is useful. However, OMB stated that while it will continue to collect data on the number of users, it believes that federal agencies should be responsible for collecting specific, detailed user data if they are using those resources. We continue to believe that OMB and CFOC would benefit from collecting specific, detailed user data on these tools, which they devoted time and multiple resources to developing. Collecting detailed data metrics that go beyond the number of users can help OMB and CFOC to better evaluate the effectiveness of these grants training tools. Additionally, OMB stated the agency is committed to working with CFOC to review the Grants Training 101 module to determine how useful it is and if any improvements or adjustments are needed. In May 2019, OMB staff said that no action had been taken to date in response to this recommendation. In January 2020, OMB responded in writing to this recommendation stating that it was continuing to collect data on usage for both training tools on the CFO.gov site. OMB specified, however, that the usage data was for the number of visitors on the two sites and on users by agency. OMB went on to say that each agency is responsible for the professional development of its own workforce, and that Federal agencies can, at their discretion, collect user data if the Roadmap and Grant Training 101 are part of their official training program. In addition, OMB stated it had made the Grants Training 101 available publicly for federal and non-federal personnel on CFO.Gov, and that collecting specific user data is not considered by them to be beneficial to demonstrate the usefulness of the materials. Based on this response, we will continue to inquire as to the availability and use of metrics and effectiveness measures for the Career Roadmap and the Grants Training 101 modules.

Recommendation: The Secretary of HHS should establish a process to monitor and evaluate HHS's grants training at the central office level. This process should include (1) a method for identifying all employees working on grants across the agency, and (2) oversight procedures to evaluate the sufficiency of sub-agencies' grants training efforts including the incorporation of leading practices related to assessing competencies, training approaches, accountability, and training results. (Recommendation 3)

Agency: Department of Health and Human Services
Status: Open

Comments: HHS concurred with our findings and recommendation. In its comment letter, HHS stated that its Office of Grants Policy, Oversight, and Evaluation, within the Office of Grants and Acquisition Policy and Accountability, Division of Grants, in conjunction with the HHS ReInvent Grants Initiative would be developing and implementing a department-wide financial assistance training and certification program to improve the functional effectiveness of the financial assistance management workforce in the areas of internal controls and risk mitigation. The program is designed to support the professional development of the HHS grants management workforce through both instructor-led and online courses. HHS' ReInvent Grants Management (RGM) staff and GAO held a conference call on November 30th, 2018 to discuss how RGM intended to address the recommendation in GAO-18-491 by developing a generalized framework for the Grants Management Training and Certification (GMTC) program for HHS. An HHS official reported that at its December 2019 quarterly meeting, the HHS Division of Workforce Development (DWD) reported they had in the past quarter: briefed the HHS Executive Committee on Grants Administration Policy (ECGAP) on the DWD mission and goals for training the grants workforce; developed briefing documents and presentations based on a RGM developed framework to develop competencies and outline curriculum of the GMTC program; continued to review and refine the program framework to incorporate DWD mission and goals; drafted the initial policy to further inform the structure and procedures of the GMTC program (e.g. certification levels, required coursework, career development requirements), which should be issued by HHS Office of Grants within Federal Fiscal Year 2020; and collaborated with the HHS Grants Closeout Business Process Reengineering Team to discuss current grants closeout status and how DWD can support grant staff and grant recipient closeout training efforts. Given the ongoing nature of HHS efforts, GAO will continue to monitor progress on a quarterly basis.

Recommendation: The Chief of the Forest Service should determine whether new regulations governing timber export and substitution are appropriate. If the agency determines new regulations are appropriate, it should issue them in accordance with the 1997 act, in consultation with BLM. Otherwise, the agency should seek legislative relief from the act's requirement. (Recommendation 1)

Agency: Department of Agriculture: Forest Service
Status: Open

Comments: In its May 15, 2020 correspondence, the Forest Service stated that it is putting together a Corrective Action Plan for addressing the recommendation. It expects leadership review of the plan to be completed in June 2020.

Recommendation: The Director of the BLM should determine whether new regulations governing timber export and substitution are appropriate. If the agency determines new regulations are appropriate, it should issue them in accordance with the 1997 act, in consultation with the Forest Service. Otherwise, the agency should seek legislative relief from the act's requirement. (Recommendation 2)

Agency: Department of the Interior: Bureau of Land Management
Status: Open

Comments: In its April 9, 2020 correspondence, BLM stated that a proposed rule continues to be reviewed by Departmental officials. BLM identified December 31, 2020 as a new target date for completing this recommendation.

Recommendation: The Chief of the Forest Service should review agency policies for continued relevance and effectiveness in addressing the risk of illegal timber export and substitution, and based on that review--and in accordance with applicable regulations--should issue new policies as necessary. (Recommendation 3)

Agency: Department of Agriculture: Forest Service
Status: Open

Comments: In its May 15, 2020 correspondence, the Forest Service stated that it is putting together a Corrective Action Plan for addressing the recommendation. It expects leadership review of the plan to be completed in June 2020.

Recommendation: The Director of the BLM should review agency policies for continued relevance and effectiveness in addressing the risk of illegal timber export and substitution, and based on that review--and in accordance with applicable regulations--should issue new policies as necessary. (Recommendation 4)

Agency: Department of the Interior: Bureau of Land Management
Status: Open

Comments: In its April 9, 2020 correspondence, BLM stated that any action to address this recommendation is contingent upon the completion of Recommendation #2. Once BLM's response to that recommendation is completed, the agency will address this recommendation.

Recommendation: The Secretary of Homeland Security should direct Homeland Security's members of the interagency working group for protection of Native American cultural property to implement selected leading collaboration practices, such as taking steps to agree on outcomes and objectives, clarify roles and responsibilities, and document these decisions. (Recommendation 1)

Agency: Department of Homeland Security
Status: Open

Comments: As of August 2019, we have reached out to the Department of Homeland Security and are awaiting a response on actions they may have taken in response to this recommendation.

Recommendation: The Secretary of the Interior should direct Interior's members of the interagency working group for protection of Native American cultural property to implement selected leading collaboration practices, such as taking steps to agree on outcomes and objectives, clarify roles and responsibilities, and document these decisions. (Recommendation 2)

Agency: Department of the Interior
Status: Open

Comments: Since August 2018, Interior's Office of International Affairs has updated its contact list for international repatriation assistance with information on the Department's roles and responsibilities in support of international repatriation. In addition, Interior's interagency working group members have developed a description of the interagency working group. However, the statement does not include outcomes and objectives for the group's work. GAO made the same recommendation to each of the four agencies covered in the review because implementing leading collaboration practices will require the collective participation of group members. GAO will keep the recommendation open until further collaborative actions are taken.

Recommendation: The Attorney General should direct Justice's members of the interagency working group for protection of Native American cultural property to implement selected leading collaboration practices, such as taking steps to agree on outcomes and objectives, clarify roles and responsibilities, and document these decisions. (Recommendation 3)

Agency: Department of Justice
Status: Open

Comments: As of August 2019, we have reached out to the Department of Justice and are awaiting a response on actions they may have taken in response to this recommendation.

Recommendation: The Secretary of State should direct State's members of the interagency working group for protection of Native American cultural property to implement selected leading collaboration practices, such as taking steps to agree on outcomes and objectives, clarify roles and responsibilities, and document these decisions. (Recommendation 4)

Agency: Department of State
Status: Open

Comments: Since August 2018, the Department of State shared a statement of its roles and responsibilities with other working group members. However, the statement does not include outcomes and objectives for the group's work. GAO made the same recommendation to each of the four agencies covered in the review because implementing leading collaboration practices will require the collective participation of group members. GAO will keep the recommendation open until further collaborative actions are taken.

Recommendation: The Secretary of Homeland Security should direct Homeland Security's members of the interagency working group for protection of Native American cultural property to identify and externally communicate to tribes points of contact within the agency that are responsible for responding to tribes' requests for assistance with repatriating cultural items from overseas auctions. (Recommendation 5)

Agency: Department of Homeland Security
Status: Open

Comments: As of August 2019, we have reached out to the Department of Homeland Security and are awaiting a response on actions they may have taken in response to this recommendation.

Recommendation: The Attorney General should direct Justice's members of the interagency working group for protection of Native American cultural property to identify and externally communicate to tribes points of contact within the agency that are responsible for responding to tribes' requests for assistance with repatriating cultural items from overseas auctions. (Recommendation 7)

Agency: Department of Justice
Status: Open

Comments: As of August 2019, we have reached out to the Department of Justice and are awaiting a response on actions they may have taken in response to this recommendation.

Recommendation: The Secretary of Homeland Security should direct Homeland Security's members of the interagency working group for protection of Native American cultural property to collaborate with the interagency working group members from other agencies to assess, in consultation with Indian tribes, whether and how amending the U.S. legal framework governing the export, theft, and trafficking of Native American cultural items would facilitate the repatriation of these items from auctions overseas and report its findings to Congress. (Recommendation 9)

Agency: Department of Homeland Security
Status: Open

Comments: As of August 2019, we have reached out to the Department of Homeland Security and are awaiting a response on actions they may have taken in response to this recommendation.

Recommendation: The Secretary of the Interior should direct Interior's members of the interagency working group for protection of Native American cultural property to collaborate with the interagency working group members from other agencies to assess, in consultation with Indian tribes, whether and how amending the U.S. legal framework governing the export, theft, and trafficking of Native American cultural items would facilitate the repatriation of these items from auctions overseas and report its findings to Congress. (Recommendation 10)

Agency: Department of the Interior
Status: Open

Comments: As of September 2019, Interior is working to develop an assessment of legislative options for discussion with the interagency working group, and plans to meet with tribes later this fall to discuss the assessment. Interior anticipates a September 30, 2020, completion date for the assessment of these legislative options. Interior has also reviewed legislative proposals related to the export, theft, and trafficking of Native American cultural items and has prepared for Congressional hearings on this topic.

Recommendation: The Attorney General should direct Justice's members of the interagency working group for protection of Native American cultural property to collaborate with the interagency working group members from other agencies to assess, in consultation with Indian tribes, whether and how amending the U.S. legal framework governing the export, theft, and trafficking of Native American cultural items would facilitate the repatriation of these items from auctions overseas and report its findings to Congress. (Recommendation 11)

Agency: Department of Justice
Status: Open

Comments: As of August 2019, we have reached out to the Department of Justice and are awaiting a response on actions they may have taken in response to this recommendation.

Recommendation: The Secretary of State should direct State's members of the interagency working group for protection of Native American cultural property to collaborate with the interagency working group members from other agencies to assess, in consultation with Indian tribes, whether and how amending the U.S. legal framework governing the export, theft, and trafficking of Native American cultural items would facilitate the repatriation of these items from auctions overseas and report its findings to Congress. (Recommendation 12)

Agency: Department of State
Status: Open

Comments: In November 2019, the Department of State, in conjunction with other interagency working group members, circulated a draft legal assessment and draft legislative options. The interagency working group members conducted a listening session with tribal members in November 2019, and conducted a tribal consultation in January 2020. GAO will continue monitoring the agencies' efforts toward implementing this recommendation.

Recommendation: The NIST Associate Director for Laboratory Programs should update NIST policy to include periodic comprehensive management review of the agency's measurement services to assess gaps and ensure alignment with stakeholders' needs, and take steps to ensure that the Associate Director completes the review of NIST's standards development activities (Recommendation 1).

Agency: Department of Commerce: National Institute of Standards and Technology
Status: Open

Comments: NIST concurred with this recommendation and, as of May 2020, had taken some steps to implement it. Specifically, NIST provided information indicating it uses multiple information sources to identify potential measurement service gaps. For example, the Associate Director for Laboratory Programs (ADLP) reviews quarterly reports from NIST's laboratory divisions that include information on measurement services. The ADLP may identify measurement service gaps as part of this review. Also, the NIST Measurement Services Council serves the ADLP in an advisory role to identify and address NIST-wide issues related to the quality, relevance, performance, operations, and resources allocated to the health and improvement of NIST measurement services. The Council produces an annual report that addresses the health of NIST's measurement services, including potential changes needed to meet future customer needs. Further, NIST employees may suggest new services through processes established in suborder 5901.01. Many of these efforts also include consideration of potential gaps in NIST's participation in standards development activities. Additionally, NIST Order 5301.00 delegates responsibility to review standards activities and participation across several levels of NIST management. Although these actions may help identify gaps in NIST's participation in standards development activities as well as identify gaps in the measurement services it provides, it is not clear how or whether they fulfill the periodic review of the effectiveness of NIST's participation in documentary standards activities that the ADLP is to conduct under NIST's standards participation policy. We will update our evaluation of NIST's implementation of this recommendation when the agency provides additional information on how the activities described above fulfill the effectiveness review called for by NIST's policy, or provides information documenting that the ADLP has conducted such a review.

Recommendation: The Secretary of the Treasury should include in Treasury's fiscal year 2018 AFR information about all civil monetary penalties within its jurisdiction, including the inflation adjustment of the civil monetary penalties. (Recommendation 5)

Agency: Department of the Treasury
Status: Open

Comments: In November 2018, Treasury issued its fiscal year 2018 agency financial report and included information about all civil monetary penalties within its jurisdiction. However, it did not adjust two civil monetary penalty amounts for inflation and indicated that it planned to complete the regulations to adjust these two amounts for inflation by the end of 2018. In November 2019, Treasury issued its fiscal year 2019 agency financial report and included information about all civil monetary penalties within its jurisdiction. However, it did not adjust one of the two civil monetary penalty amounts for inflation in our finding. As of June 2020, Treasury has not taken the necessary corrective actions to completely address this recommendation.

Recommendation: The Secretary of the Navy should: assess why reverse auctions that are conducted using existing contract vehicles have only one bidder at higher rates than reverse auctions conducted on the open market; determine what factors indicate that conducting reverse auctions is appropriate when using existing contract vehicles; and provide this information to contracting officials so that they can consider it when developing their acquisition strategies.(Recommendation 4)

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: DOD agreed with this recommendation and stated that the department expected to complete actions to address it by the end of calendar year 2018. In August 2019, Navy officials told us that they had reviewed data on reverse auctions to determine a root cause of single bidders, and describing the factors that indicate that conducting a reverse auction are appropriate. However, they had not yet provided this information to contracting officials as of July 2020.

Recommendation: The Secretary of the Navy should: document and provide information to contracting officials that describes available reverse auction providers and platforms, and any associated fee structures; and provide guidance, as appropriate, to contracting officials to ensure that they compare the options that are available to them when considering whether to use reverse auctions. (Recommendation 6)

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: DOD agreed with this recommendation and stated that the department expected to complete actions to address it by the end of calendar year 2018. In August 2019, Navy officials stated that memorandum of understanding with reverse auction providers, including fee information, are distributed to contracting officials. However, as of August 2020, they had not provided us with evidence that they had distributed a memorandum related to the primary reverse auction provider currently used by the Navy.

Recommendation: The Director of OPM, after consultation with the chief human capital officer (CHCO) Council, should explore the feasibility of improving the quality of data on employee misconduct by providing additional guidance to agencies on how to record instances of misconduct in OPM's databases. (Recommendation 1)

Agency: Office of Personnel Management
Status: Open

Comments: OPM disagreed with this recommendation and cautioned against creating a comprehensive catalog of forms of misconduct because such an approach could expose agencies to the argument that any conduct that was not captured by OPM is not a permissible basis for discipline. In January 2020, OPM stated they are compiling disciplinary data collected from agencies under Executive Order 13839 and anticipate the data will be posted in the near future on OPM.gov.

Recommendation: The Director of OPM, after consultation with the CHCO Council, should broadly disseminate to agencies the promising practices and lessons learned, such as those described in this report, as well as work with agencies through such vehicles as the CHCO Council, to identify any additional practices. (Recommendation 2)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM partially agreed with this recommendation. In December 2018, OPM stated that it plans to continue to use promising practices and to issue guidance on progressive discipline and tables of penalties. On July 2, 2019, OPM restated it partially concurs with this recommendation. OPM stated that it issued a guidance memorandum to Federal agencies on October 10, 2018, to aid in the implementation of Executive Order 13839, section 5, Ensuring Integrity of Personnel Files. As of January, 2020, OPM stated they are finalizing compiling disciplinary data collected from agencies under that Executive Order and anticipates it will be posted in the near future on OPM.gov. OPM also stated they are in the process of updating online employee relations training to be made available to human resources practitioners and managers later this year.

Recommendation: The Director of OPM, after consultation with the CHCO Council, should provide guidance to agencies to enhance the training received by managers/supervisors and human capital staff to ensure that they have the guidance and technical assistance they need to effectively address misconduct and maximize the productivity of their workforces. (Recommendation 3)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM partially agreed with this recommendation. On September 17, 2019, OPM published a proposed rule pertaining to probationary periods, performance-based actions, and adverse actions. The public comment period for this proposed rule closed on October 17, 2019. As of January 2020, OPM said they received comments from 1,199 individuals. OPM stated that they are reviewing, analyzing, and adjudicating all comments received in order to prepare a final rule later in 2020. Once the final rule is published, OPM stated they will work with the CHCO Council to educate supervisors on the new rule in accordance with Executive Order 13839.

Recommendation: The Director of OMB should ensure the consistent application of the requirement for respondent time costs, including clarifying instructions for when and how to include fringe benefits. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: In April 2019, we requested information from OMB on the agency's implementation of our recommendation but as of May 2019 have not received any status updates. We will continue to monitor OMB's efforts to address our recommendation.

Recommendation: The Director of OMB should review the policies, procedures, and related control activities to ensure that the agency's Paperwork Reduction Act review process is operating effectively. (Recommendation 2)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: In April 2019, we requested information from OMB on the agency's implementation of our recommendation but as of May 2019 have not received any status updates. We will continue to monitor OMB's efforts to address our recommendation.

Recommendation: The Secretary of Agriculture should review the policies, procedures, and related control activities to ensure that the agency's Paperwork Reduction Act review process is operating effectively. (Recommendation 3)

Agency: Department of Agriculture
Status: Open

Comments: In June 2019, USDA provided an update on efforts to review its Paperwork Reduction Act (PRA) policies and procedures. To ensure that its PRA process is operating effectively, USDA reviewed and updated its internal guidance on preparing information collection request supporting statements, including sections regarding the calculation of respondent burden hour and cost estimates. This updated guidance encourages consultation with potential respondents to help develop these burden estimates. A new PRA consultation checklist directs agency officials to seek input from individuals outside of USDA regarding the agency's burden estimates for an information collection request, including the validity of the methodology and assumptions used in the estimate calculations. The updated guidance specifies that fringe benefits, such as paid leave, insurance, and retirement contributions, should be included in the wage rates used for respondent burden cost estimates. It also clarifies when roundtrip travel time and costs should be included in burden estimates. According to USDA officials, the agency meets with PRA Coordinators to ensure compliance with the updated guidance. These are positive steps toward improving USDA's burden calculation process. However, USDA has not yet provided evidence of a review or revision of its information collection request review process. A review or revision of this process could help USDA better identify errors in burden estimate calculations prior to the final information collection request being sent to OMB and released to the public.

Recommendation: The Secretary of Health and Human Services should review the policies, procedures, and related control activities to ensure that the agency's Paperwork Reduction Act review process is operating effectively. (Recommendation 5)

Agency: Department of Health and Human Services
Status: Open

Comments: In October 2018, HHS provided a statement of actions it had taken to address this recommendation. HHS stated that it had added reporting tools to its Common Data Element Repository (CDER) Library that could help improve tracking of information related to HHS's Information Collection Requests. HHS also stated that it had launched daily emails to Paperwork Reduction Act (PRA) staff to inform them of Office of Management and Budget (OMB) Notices of Action related to Information Collection Requests. Additionally, HHS released an information collection burden calculator tool in the CDER Library to give PRA staff the ability to create burden tables for consistent use across multiple platforms for a single Information Collection Request. According to HHS officials, this tool incorporates both wages and employee benefits in the burden calculations. As of August 2019, HHS's burden calculator tool has been included as a resource on PRA.Digital.gov, a new OMB website that serves as a PRA knowledge base for federal staff. While these are important steps, we are awaiting additional details on how these changes have affected HHS's PRA review process. We will continue to monitor HHS's progress toward addressing our recommendation.

Recommendation: The Secretary of Health and Human Services should leverage existing consultation with stakeholders and the public to explicitly seek input on the estimated burden imposed by information collections. (Recommendation 6)

Agency: Department of Health and Human Services
Status: Open

Comments: In October 2018, HHS stated that it continues to leverage consultation mechanisms for input on the burdens imposed by information collections. According to the agency, it plans to increase the use of the eRulemaking program's Federal Docket Management System for all information collections, including non-rule Information Collection Requests. HHS also stated it plans to contact stakeholders to discuss potential information collections and receive burden estimates. As of August 9, 2019, we have not received an update about HHS's actions or plans. We will continue to monitor HHS's efforts to address our recommendation.

Recommendation: The Secretary of Transportation should review the policies, procedures, and related control activities to ensure that the agency's Paperwork Reduction Act review process is operating effectively. (Recommendation 7)

Agency: Department of Transportation
Status: Open

Comments: In its September 2018 recommendation implementation update, Department of Transportation (DOT) stated that the department began an internal review of the Paperwork Reduction Act program operations, policy, and guidance. Officials reported that they anticipate issuing an updated policy by September 30, 2019. We will continue to monitor DOT's efforts to address our recommendation.

Recommendation: The Secretary of Transportation should leverage existing consultation with stakeholders and the public to explicitly seek input on the estimated burden imposed by information collections. (Recommendation 8)

Agency: Department of Transportation
Status: Open

Comments: In its September 2018 recommendation implementation update, Department of Transportation (DOT) stated that the department began an internal review of the Paperwork Reduction Act program operations, policy, and guidance. Officials reported that they anticipate issuing an updated policy by September 30, 2019. We will continue to monitor DOT's efforts to address our recommendation.

Recommendation: Congress may wish to consider amending the Paperwork Reduction Act to more explicitly require federal agencies to consult with potential respondents on each information collection beyond the publication of Federal Register notices using efficient and effective consultation methods. (Matter for Consideration 1)

Agency: Congress
Status: Open

Comments: As of July 2019, no relevant legislation has been enacted. We will continue to monitor legislation to see if it addresses our matter for congressional consideration.

Recommendation: The Secretary of Transportation should include enough information in Federal Register notices to allow the public to reasonably calculate or determine the number of respondents, the frequency of response, and the average burden time per response for each information collection activity. (Recommendation 9)

Agency: Department of Transportation
Status: Open

Comments: In its September 2018 recommendation implementation update, Department of Transportation (DOT) stated that the departmental Paperwork Reduction Act (PRA) Officer has reviewed the Notice templates and checklist with DOT component PRA Officers during monthly PRA meetings and has applied additional scrutiny in the review process. DOT officials stated that the department began an internal review of the Paperwork Reduction Act program operations, policy, and guidance that will include additional aids to support Notice development. Officials reported that they anticipate issuing an updated policy by September 30, 2019. We will continue to monitor DOT's efforts to address our recommendation.

Recommendation: The Commissioner of Internal Revenue should leverage existing consultation with stakeholders and the public to explicitly seek input on the estimated burden imposed by information collections. (Recommendation 10)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: According to IRS, agency officials met with representatives of external stakeholder organizations on the Information Reporting Program Advisory Committee (IRPAC) to seek input on the burden experience of their participants and the communities they represent. As a result of these discussions, the IRPAC has added the burden experience as defined by the PRA as a monthly agenda topic for the 2019 session. As of September 2019, IRS officials reported that the IRPAC has not yet met in 2019. Once we receive documentation confirming this action, we will update the status of the recommendation accordingly.

Recommendation: The Commissioner of Internal Revenue should include enough information in Federal Register notices to allow the public to reasonably calculate or determine the number of respondents, the frequency of response, and the average burden time per response for each information collection activity. (Recommendation 11)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In October 2018, Internal Revenue Service (IRS) reported that it continues to standardize the review process by developing a checklist that ensures all required elements are included in the Federal Register notice. Agency officials stated that the agency will complete the development and delivery of training for employees with responsibility for PRA compliance in fiscal year 2019. We will continue to monitor IRS's progress toward completing these actions.

Recommendation: The Secretary of the American Battle Monuments Commission should designate a chief FOIA officer at the assistant secretary level or equivalent. (Recommendation 1)

Agency: American Battle Monuments Commission
Status: Open

Comments: American Battle Monument Commission (ABMC) officials stated they are working to implement GAO's recommendations by the end of fiscal year 2020.

Recommendation: The Secretary of the American Battle Monuments Commission should update and publish comprehensive FOIA regulations that include requirements established by law and Justice guidance. (Recommendation 2)

Agency: American Battle Monuments Commission
Status: Open

Comments: American Battle Monument Commission (ABMC) officials stated they are working to implement GAO's recommendations. On February 18, 2020, ABMC published proposed revised FOIA regulations which are pending final rule in the Federal Register.

Recommendation: The Chief Executive Officer and Director of the Broadcasting Board of Governors should update and publish comprehensive FOIA regulations that include requirements established by law and Justice guidance. (Recommendation 3)

Agency: U.S. Agency for Global Media
Status: Open

Comments: The U.S. Agency for Global Media (formally known as the Broadcasting Board of Governors) performed a comprehensive review of its FOIA regulations and updated its regulations in accordance with GAO's recommendation. The agency anticipates publishing proposed updates for notice and comment in spring 2020, followed by a final rule.

Recommendation: The Secretary of DHS should take steps to develop and document a plan that fully addresses best practices with regards to reduction of backlogged FOIA requests. (Recommendation 4)

Agency: Department of Homeland Security
Status: Open

Comments: In April 2018, the Department of Homeland Security initiated a department-wide compliance assessment and stated that it plans to use the results of the assessment to help guide the department in identifying best practices and areas of improvement. The department does not have an estimate for when the plan will be complete.

Recommendation: The Secretary of DOI should take steps to develop and document a plan that fully addresses best practices with regards to reduction of backlogged FOIA requests. (Recommendation 7)

Agency: Department of the Interior
Status: Open

Comments: In August 2018, the Department of Interior informed GAO that the department has created a preliminary backlog reduction plan that includes expanding the use of automation tools, expanding the use of interim responses, and closing the Department's 10 oldest requests. Currently, GAO is awaiting a copy of the Department's backlog reduction plan.

Recommendation: The Chair of EEOC should designate a chief FOIA officer at the assistant secretary level or equivalent. (Recommendation 8)

Agency: Equal Employment Opportunity Commission
Status: Open

Comments: GAO is currently awaiting the agency's response to GAO recommendations..

Recommendation: The Chair of EEOC should take steps to develop and document a plan that fully addresses best practices with regards to reduction of backlogged FOIA requests. (Recommendation 9)

Agency: Equal Employment Opportunity Commission
Status: Open

Comments: GAO is currently awaiting the agency's response to GAO recommendations.

Recommendation: The Attorney General of the United States should take steps to develop and document a plan that fully addresses best practices with regards to reduction of backlogged FOIA requests. (Recommendation 11)

Agency: Department of Justice
Status: Open

Comments: In August 2018, the Department of Justice acknowledged that it plans to reexamine its progress and take steps for continued improvement in reducing its backlog. Currently, GAO is awaiting a response from the Department on a publication date.

Recommendation: The Administrator of NASA should provide agency records of final opinions online. (Recommendation 14)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: In August 2018, NASA agreed to provide agency records of final opinions online. NASA noted that final opinions will be provided online as they are issued and released for public posting. To date, the Department has not posted any final opinions.

Recommendation: The Chairman of NTSB should take steps to develop and document a plan that fully addresses best practices with regards to reduction of backlogged FOIA requests. (Recommendation 16)

Agency: National Transportation Safety Board
Status: Open

Comments: In August 2018, NTSB provided a plan that laid out tasks for reducing its backlog. The plan did not, however provide milestones or dates for when these tasks would be completed. GAO is currently waiting for the finalized backlog FOIA plan.

Recommendation: The Director of OMB should designate a chief FOIA officer at the assistant secretary level or equivalent. (Recommendation 18)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: GAO is currently awaiting the agency's response to GAO recommendations.

Recommendation: The Director of Pension Benefit Guaranty Corporation should designate a chief FOIA officer at the assistant secretary level or equivalent. (Recommendation 19)

Agency: Pension Benefit Guaranty Corporation
Status: Open

Comments: The Pension Benefit Guaranty Corporation stated that it has designated the deputy director as the chief FOIA officer. It also noted that the director is at the Senior Level. However, this position is not equivalent to the assistant secretary level identified by GAO.

Recommendation: The President of TVA should ensure its FOIA tracking system is compliant with section 508 requirements. (Recommendation 22)

Agency: Tennessee Valley Authority
Status: Open

Comments: In August 2018, TVA provided a response to GAO's recommendation to ensure their FOIA tracking systems is compliant with section 508 requirements. TVA is currently performing an in-depth assessment of their tracking system to identify where updates can be made to ensure 508 compliance. TVA expects the assessment to be completed by the end of January 2020.

Recommendation: The President of the U.S. African Development Foundation should update and publish comprehensive FOIA regulations that inform a requester of limited unusual circumstances fees. (Recommendation 24)

Agency: African Development Foundation
Status: Open

Comments: U.S. African Development Foundation officials have stated that their FOIA regulations are currently under review and expect them to be published in the first half of calendar year 2020.

Recommendation: The Secretary of Commerce should instruct NIST to fully report the range of challenges in federal patent licensing, such as those outlined in this report, by, for example, leveraging its survey of practices at federal technology transfer offices, past Federal Laboratory Consortium studies, and agency reports and including that information in its summary reports to Congress. (Recommendation 1)

Agency: Department of Commerce
Status: Open

Comments: According to the Department of Commerce, NIST actions in response to the recommendation are in process. In August 2020, Commerce officials stated that the next annual report to the President and Congress was in the review process and is expected to be published this fall.

Recommendation: The Secretary of Commerce should instruct NIST to clarify the link between establishing patent license financial terms and the goal of promoting commercial use, through appropriate means, such as the upcoming rule-making process and updating relevant guidance. (Recommendation 2)

Agency: Department of Commerce
Status: Open

Comments: According to the Department of Commerce, NIST actions in response to the recommendation are in process and the purpose of licensing royalties will be addressed through a related initiative. The expected completion date for this action has been revised to November 2020.

Recommendation: The Secretary of Commerce should instruct NIST to facilitate formal information sharing among the agencies to provide federal labs with information on financial terms in comparable patent licenses, as appropriate. (Recommendation 3)

Agency: Department of Commerce
Status: Open

Comments: According to the Department of Commerce, NIST actions in response to the recommendation are in process. The actions to address it have been discussed by the Interagency Workgroup for Technology Transfer and the FLC, including adding a licensing guide and community of practice for licensing terms to the FLC website. In August 2020, Commerce stated that the expected completion date for this action has been revised to September 2020.

Recommendation: The Secretary of Defense should ensure that the agency or its labs document processes for establishing license financial terms, while maintaining flexibility to tailor the specific financial terms of each license. (Recommendation 4)

Agency: Department of Defense
Status: Open

Comments: DOD officials stated that DoDI 5538.08, which would require military departments and defense agencies to instruct their laboratories to document their licensing processes as appropriate, is in the review process as of August 2020.