Recommendation: The Director of DHS's Cybersecurity and Infrastructure Agency should assess EPA data when planning outreach to public water system and wastewater treatment works facilities (Recommendation 1).

Agency: Department of Homeland Security
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: FERC should review its current interagency agreements that pertain to its onshore LNG permitting process, and implement any needed updates. FERC's review should include input from cooperating agencies and CEQ. (Recommendation 1)

Agency: Federal Energy Regulatory Commission
Status: Open

Comments: In FERC's comments on a draft of our report, the Chairman of the Commission agreed with our findings and recommendations and stated that he has directed FERC staff to develop appropriate steps to implement the recommendations.

Recommendation: Once FERC has completed the review and implemented any necessary updates to interagency agreements, FERC should establish a process to regularly conduct such reviews and, as necessary, update the agreements. (Recommendation 2)

Agency: Federal Energy Regulatory Commission
Status: Open

Comments: In FERC's comments on a draft of our report, the Chairman of the Commission agreed with our findings and recommendations and stated that he has directed FERC staff to develop appropriate steps to implement the recommendations.

Recommendation: FERC should review its LNG regulations and replace the reference to the outdated 1984 earthquake standard. (Recommendation 3)

Agency: Federal Energy Regulatory Commission
Status: Open

Comments: In FERC's comments on a draft of our report, the Chairman of the Commission agreed with our findings and recommendations and stated that he has directed FERC staff to develop appropriate steps to implement the recommendations.

Recommendation: FERC should establish a process to conduct a standards-specific review of regulations that incorporate standards every 3 to 5 years and to update the regulations, if necessary. (Recommendation 4)

Agency: Federal Energy Regulatory Commission
Status: Open

Comments: In FERC's comments on a draft of our report, the Chairman of the Commission agreed with our findings and recommendations and stated that he has directed FERC staff to develop appropriate steps to implement the recommendations.

Recommendation: The Administrator of PHMSA should conduct a standards-specific review of regulations that incorporate standards and, if necessary, update the regulations or document its decision for not updating them. (Recommendation 5)

Agency: Department of Transportation: Pipeline and Hazardous Materials Safety Administration
Status: Open

Comments: In the Department of Transportation's comments on a draft of our report, the department concurred with our recommendation and said that PHMSA is currently developing a proposed rule that would incorporate updated standards, as described in our report.

Recommendation: The Administrator of PHMSA should establish a process to conduct a standards-specific review of regulations that incorporate standards every 3 to 5 years and to update the regulations, if necessary. (Recommendation 6)

Agency: Department of Transportation: Pipeline and Hazardous Materials Safety Administration
Status: Open

Comments: In the Department of Transportation's comments on a draft of our report, the department concurred with our recommendation and said that PHMSA has established a timeline for conducting a standards-specific review of LNG facility regulations every 3 to 5 years. We plan to follow-up on the status of the recommendation.

Recommendation: The Commandant of the Coast Guard should conduct a standards-specific review of the Coast Guard's regulations that incorporate standards and, if necessary, update the regulations or document its decision for not updating them. (Recommendation 7)

Agency: Department of Homeland Security: United States Coast Guard
Status: Open

Comments: In the Department of Homeland Security's comments on a draft of our report, the department concurred with our recommendation and stated that it conducts such reviews as part of its ongoing public rulemaking process. We plan to follow-up on the status of the recommendation.

Recommendation: The Commandant of the Coast Guard should update the agency's process for conducting standards-specific reviews to include time frames for completing such reviews every 3 to 5 years. (Recommendation 8)

Agency: Department of Homeland Security: United States Coast Guard
Status: Open

Comments: In the Department of Homeland Security's comments on a draft of our report, the department concurred with our recommendation and stated that the Coast Guard is in the process of updating its policy, "Standards Program For Marine Safety, Security, and Environmental Protection Programs," with timeframes for completing standards-specific reviews. The department estimated this would be completed in September 2021.

Recommendation: The Commandant of the Coast Guard should develop and implement workforce planning for the Office of Operating and Environmental Standards that addresses the four remaining key principles for strategic workforce planning. (Recommendation 9)

Agency: Department of Homeland Security: United States Coast Guard
Status: Open

Comments: In the Department of Homeland Security's comments on a draft of our report, the department concurred with our recommendation and stated that it is in the process of updating its Manpower Requirements Plan to include timeframes and milestones for completing manpower requirements analyses and determinations for positions and units. The Coast Guard anticipates promulgating the updated plan in March 2022.

Recommendation: The NPO Cost Savings Program Manager should work with CNS to evaluate the remaining site reinvestment funds and develop and implement a plan for how best to aggregate and use them. (Recommendation 1)

Agency: Department of Energy: National Nuclear Security Administration
Status: Open

Comments: NNSA concurred with the recommendation. In comments on a draft of the report, DOE stated that NPO plans to work with CNS on a plan for the remaining reinvestment funds, with an estimated completion date of December 31, 2020.

Recommendation: The Associate Administrator for Acquisition and Project Management should gather data on and document an analysis of the Cost Savings Program, including its cost effectiveness, to determine whether it is exportable to existing or future contracts. (Recommendation 2)

Agency: Department of Energy: National Nuclear Security Administration
Status: Open

Comments: NNSA concurred, in principle, with the recommendation. In its comments on a draft of the report, NNSA stated that potential benefits of the cost savings program should be considered for future contracts, as applicable. NNSA stated that it believes this recommendation is closed with actions to address other recommendations. We disagree and continue to believe that NNSA should document an analysis of the cost savings program, including its cost effectiveness, to determine the exportability of the program to other contracts.

Recommendation: The NPO Cost Savings Program Manager should share relevant lessons learned with other NNSA sites so that those sites can determine if efficiencies CNS has achieved can be implemented at other sites. (Recommendation 3)

Agency: Department of Energy: National Nuclear Security Administration
Status: Open

Comments: NNSA concurred with the recommendation. In its comments on a draft of the report, NNSA stated that it plans to upload lessons learned into DOE's Corporate Lessons Learned Database so they can be considered by other sites by December 31, 2020.

Recommendation: The Associate Administrator for Acquisition and Project Management should evaluate whether to require all other sites to institute an Annual Controlled Baseline. (Recommendation 4)

Agency: Department of Energy: National Nuclear Security Administration
Status: Open

Comments: NNSA concurred with the recommendation. In its comments on a draft of the report, NNSA stated that it plans to evaluate whether to expand use of Annual Controlled Baselines to other sites by December 31, 2020.

Recommendation: The Administrator of GSA should coordinate with agencies to ensure that street address information in the public database is complete and correctly formatted. (Recommendation 1)

Agency: General Services Administration
Status: Open
Priority recommendation

Comments: GSA has taken steps to address this recommendation. GSA revised certain data elements' definitions in 2020 and incorporated them into the 2020 FRPP data dictionary to enhance the accuracy and completeness of the data reported to FRPP. In addition, the Federal Real Property Council established a data governance working group that meets regularly to address challenges to reliable and complete data in the FRPP. In September 2020, that group committed to developing an action plan to outline the steps to improve the location information in FRPP that we identified in February 2020. If these efforts succeed, GAO will close this recommendation as implemented.

Recommendation: The Administrator of GSA should coordinate with agencies to review V&V anomaly categories to better target incorrect data. (Recommendation 2)

Agency: General Services Administration
Status: Open

Comments: GSA has taken steps to address this recommendation. The Federal Real Property Council established a data governance working group that meets regularly to address challenges to reliable and complete data in the FRPP. In September 2020, GSA described step that the working group has taken to make V&V anomaly categories better target incorrect data. GSA is currently assessing these actions.

Recommendation: The Administrator of GSA should work in consultation with agencies to determine which, if any, data should be withheld from public release. (Recommendation 3)

Agency: General Services Administration
Status: Open

Comments: GSA staff said that the agency now agrees with this recommendation and in an September 2020 meeting said that GSA staff were working with relevant agencies to address it. GAO will continue to monitor their progress.

Recommendation: The Administrator of GSA should instruct each agency to apply a consistent, risk-based approach in determining which, if any, assets or asset-specific information should be withheld from public release. (Recommendation 4)

Agency: General Services Administration
Status: Open

Comments: GSA agreed with this recommendation and in an September 2020 meeting said that GSA staff were working with relevant agencies to address it. GAO will continue to monitor their progress.

Recommendation: The Administrator of GSA should allow agencies to provide summary data for secure installations. (Recommendation 5)

Agency: General Services Administration
Status: Open

Comments: In April 2020, GAO staff met with GSA and Interagency Security Committee officials. The officials explained that they had had discussions to determine what installations would be considered secure installations and were considering what changes to make to the data. GAO will continue to monitor their actions. In September 2020, GSA confirmed that the Federal Real Property Council was working on the issue.

Recommendation: The Administrator of GSA should link all of GSA's publicly available realproperty data sources. (Recommendation 6)

Agency: General Services Administration
Status: Open

Comments: GSA agreed with this recommendation and in an September 2020 meeting said that GSA staff summarized the actions the agency has taken to link all of the real property data sources. GAO is currently assessing the actions.

Recommendation: The Administrator of GSA should remedy the asbestos-related data shortcomings in IRIS, either by approving the proposed update to IRIS and its associated funding or by implementing an alternative plan to enter asbestos data via the existing interface. This alternative plan could include, for example, training more individuals to use the current database functions. (Recommendation 1)

Agency: General Services Administration
Status: Open

Comments: In March 2019, GSA indicated it will address this recommendation by updating and enhancing the asbestos module in IRIS to address the issues identified in our report. GSA intends to allocate available funding and complete the changes to IRIS by the end of fiscal year 2019. We will continue to follow-up with GSA about the status of this recommendation.

Recommendation: The Administrator of APHIS should develop a timeline for (1) defining birds that are not bred for research and that are covered by the Animal Welfare Act, and (2) requiring that research facilities report to APHIS their use of birds covered by the act. (Recommendation 1)

Agency: Department of Agriculture: Animal and Plant Health Inspection Service
Status: Open

Comments: According to APHIS officials, the agency developed a timeline and a work plan for an Advance Notice of Proposed Rule Making (ANPRM) to define "bred for use in research" as it applies to birds (as well as to rats and mice) under the Animal Welfare Act and submitted it to USDA officials on July 18, 2019. However, as of October 2019, USDA had not established a date to publish the ANPRM and had instead placed it on the department's long-term regulatory agenda. We will continue to monitor USDA's efforts and provide updated information when it becomes available.

Recommendation: The Administrator of APHIS should instruct federal agencies to report their use of animals covered by the Animal Welfare Act in federal facilities located outside of the United States. (Recommendation 2)

Agency: Department of Agriculture: Animal and Plant Health Inspection Service
Status: Open

Comments: USDA disagreed with this recommendation for several reasons. For example, USDA stated that the absence of an exclusion to the requirements of the Animal Welfare Act or its regulations for federal research located outside of the United States does not create a requirement to collect information about such facilities' use of animals. In October 2019, APHIS officials said the agency continues to disagree with the recommendation. However, we have no reason to believe that such facilities should be excluded under the Act, and we continue to believe that the Administrator of APHIS should instruct federal agencies to report their use of animals in activities covered by the Animal Welfare Act in federal facilities located outside of the United States. We will continue to monitor any actions taken by APHIS to address this recommendation and provide updated information when it becomes available.

Recommendation: In developing the definition of field studies, the Administrator of APHIS should provide research facilities with clear criteria for identifying field studies that are covered by the Animal Welfare Act's regulations and that facilities should report to APHIS as well as field studies that facilities should not report. (Recommendation 3)

Agency: Department of Agriculture: Animal and Plant Health Inspection Service
Status: Open

Comments: In its comments on our draft report, USDA stated that APHIS agreed to issue a guidance document by December 31, 2018. According to APHIS officials, the agency prepared a draft guidance document entitled "Research Involving Free-Living Wild Species" for departmental review in April 2019. As of October 2019, APHIS was in the process of reviewing comments from the department. We will continue to monitor APHIS and USDA's actions to implement the recommendation.

Recommendation: The Secretary of VA should, in collaboration with ISC, review and revise VA's risk management policies for VHA facilities to ensure VA incorporates ISC standards, as appropriate. (Recommendation 1)

Agency: Department of Veterans Affairs
Status: Open

Comments: Shortly after the issuance of the report, VA notified GAO that it was in the process of working with the lnteragency Security Committee (ISC) to update its vulnerability assessment program, with a target completion date of January 2019. Despite multiple attempts, as of June 2020, VA has not provided any information on its progress in updating its program.

Recommendation: The Secretary of VA should develop an oversight strategy that allows VA to assess the effectiveness of risk management programs at VHA facilities system-wide. (Recommendation 2)

Agency: Department of Veterans Affairs
Status: Open

Comments: Shortly after the issuance of the report, VA notified GAO that it had identified OS&LE as the internal entity responsible for conducting a complete review of VA's current risk management policies and processes for VA facilities and that it was reviewing an ISC-certified risk assessment tool for possible implementation consideration. Despite multiple attempts, as of June 2020, VA had not provided an update on its efforts to implement this recommendation.

Recommendation: The Secretaries of the Army, Navy, and Air Force should work with the Office of the Secretary of Defense to issue a requirement to their installations to systematically track the costs associated with extreme weather events and climate change. (Recommendation 1)

Agency: Department of Defense: Department of the Air Force
Status: Open

Comments: In October 2017, DOD non-concurred with our recommendation. In August 2018, an official from the Office of the Assistant Secretary of Defense (Energy, Installations & Environment) stated that because DOD non-concurred with this recommendation, the department has no plans to implement it. As of June 2020, DOD has not provided evidence that the department intends to implement it. Thus, the recommendation remains open and we will continue to follow up on it, if DOD decides to take relevant actions.

Recommendation: The Secretaries of the Army, Navy, and Air Force should work with the Office of the Secretary of Defense to issue a requirement to their installations to systematically track the costs associated with extreme weather events and climate change. (Recommendation 1)

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: In October 2017, DOD non-concurred with our recommendation. In August 2018, an official from the Office of the Assistant Secretary of Defense (Energy, Installations & Environment) stated that because DOD non-concurred with this recommendation, the department has no plans to implement it. As of June 2020, DOD has not provided evidence that the department intends to implement it. Thus, the recommendation remains open and we will continue to follow up on it, if DOD decides to take relevant actions.

Recommendation: The Secretaries of the Army, Navy, and Air Force should work with the Office of the Secretary of Defense to issue a requirement to their installations to systematically track the costs associated with extreme weather events and climate change. (Recommendation 1)

Agency: Department of Defense: Department of the Army
Status: Open

Comments: In October 2017, DOD non-concurred with our recommendation. In August 2018, an official from the Office of the Assistant Secretary of Defense (Energy, Installations & Environment) stated that because DOD non-concurred with this recommendation, the department has no plans to implement it. As of June 2020, DOD has not provided evidence that the department intends to implement it. Thus, the recommendation remains open and we will continue to follow up on it, if DOD decides to take relevant actions.

Recommendation: The Secretaries of the Army, Navy, and Air Force should take steps to administer the Screening Level Vulnerability Assessment Survey, or a similar instrument, to all relevant locations. (Recommendation 2)

Agency: Department of Defense: Department of the Air Force
Status: Open

Comments: In October 2017, DOD non-concurred with our recommendation. In August 2018, an official from the Office of the Assistant Secretary of Defense (Energy, Installations & Environment) stated that because DOD non-concurred with this recommendation, the department has no plans to implement it. As of June 2020, DOD has not provided evidence that the department intends to implement it. Thus, the recommendation remains open and we will continue to follow up on it, if DOD decides to take relevant actions.

Recommendation: The Secretaries of the Army, Navy, and Air Force should take steps to administer the Screening Level Vulnerability Assessment Survey, or a similar instrument, to all relevant locations. (Recommendation 2)

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: In October 2017, DOD non-concurred with our recommendation. In August 2018, an official from the Office of the Assistant Secretary of Defense (Energy, Installations & Environment) stated that because DOD non-concurred with this recommendation, the department has no plans to implement it. As of June 2020, DOD has not provided evidence that the department intends to implement it. Thus, the recommendation remains open and we will continue to follow up on it, if DOD decides to take relevant actions.

Recommendation: The Secretaries of the Army, Navy, and Air Force should take steps to administer the Screening Level Vulnerability Assessment Survey, or a similar instrument, to all relevant locations. (Recommendation 2)

Agency: Department of Defense: Department of the Army
Status: Open

Comments: In October 2017, DOD non-concurred with our recommendation. In August 2018, an official from the Office of the Assistant Secretary of Defense (Energy, Installations & Environment) stated that because DOD non-concurred with this recommendation, the department has no plans to implement it. As of June 2020, DOD has not provided evidence that the department intends to implement it. Thus, the recommendation remains open and we will continue to follow up on it, if DOD decides to take relevant actions.

Recommendation: The Secretaries of the Army, Navy, and Air Force should implement DOD goals and plans by incorporating climate change adaptation into service-level guidance and required training for the development of installation-level plans, including master plans and natural resource plans, at all locations. (Recommendation 3)

Agency: Department of Defense: Department of the Air Force
Status: Open

Comments: In October 2017, DOD partially concurred with our recommendation. According to a July 2018 Corrective Action Plan provided by DOD, it was continuing to review DOD Directive (DODD) 4715.21 on climate resilience; DOD reissued the directive in August 2018. The directive requires the military departments to incorporate adaptation to climate change impacts into their planning for facilities. Further, DOD has incorporated adaptation into other guidance that applies to each of the departments. For example, with revisions to DOD's Unified Facilities Criteria for Master Planning and High Performance and Sustainable Building Requirements, as well the issuance of the guide "Climate Adaptation for DOD Natural Resource Managers," DOD has instructed the military departments' planners to incorporate adaptation into installation-level plans. Further, in 2020 DOD issued guidance that requires the military departments to use a DOD database on sea level changes in their planning for coastal infrastructure (sea level change is one impact of climate change). However, as of June 2020, the Air Force had not provided evidence of required training for installation-level planners that incorporates the DOD guidance discussed in this summary. Thus, the recommendation remains open and we will review evidence of such training if that evidence becomes available.

Recommendation: The Secretaries of the Army, Navy, and Air Force should implement DOD goals and plans by incorporating climate change adaptation into service-level guidance and required training for the development of installation-level plans, including master plans and natural resource plans, at all locations. (Recommendation 3)

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: In October 2017, DOD partially concurred with our recommendation. According to a July 2018 Corrective Action Plan provided by DOD, it was continuing to review DOD Directive (DODD) 4715.21 on climate resilience; DOD reissued the directive in August 2018. The directive requires the military departments to incorporate adaptation to climate change impacts into their planning for facilities. Further, DOD has incorporated adaptation into other guidance that applies to each of the departments. For example, with revisions to DOD's Unified Facilities Criteria for Master Planning and High Performance and Sustainable Building Requirements, as well the issuance of the guide "Climate Adaptation for DOD Natural Resource Managers," DOD has instructed the military departments' planners to incorporate adaptation into installation-level plans. Further, in 2020, DOD issued guidance that requires the military departments to use a DOD database on sea level changes in their planning for coastal infrastructure (sea level change is one impact of climate change). However, as of June 2020, the Navy had not provided evidence of required training for installation-level planners that incorporates the DOD guidance discussed in this summary. Thus, the recommendation remains open and we will review evidence of such training if that evidence becomes available.

Recommendation: The Secretaries of the Army, Navy, and Air Force should implement DOD goals and plans by incorporating climate change adaptation into service-level guidance and required training for the development of installation-level plans, including master plans and natural resource plans, at all locations. (Recommendation 3)

Agency: Department of Defense: Department of the Army
Status: Open

Comments: In October 2017, DOD partially concurred with our recommendation. According to a July 2018 Corrective Action Plan provided by DOD, it was continuing to review DOD Directive (DODD) 4715.21 on climate resilience; DOD reissued the directive in August 2018. The directive requires the military departments to incorporate adaptation to climate change impacts into their planning for facilities. Further, DOD has incorporated adaptation into other guidance that applies to each of the departments. For example, with revisions to DOD's Unified Facilities Criteria for Master Planning and High Performance and Sustainable Building Requirements, as well the issuance of the guide "Climate Adaptation for DOD Natural Resource Managers," DOD has instructed the military departments' planners to incorporate adaptation into installation-level plans. Further, in 2020, DOD issued guidance that requires the military departments to use a DOD database on sea level changes in their planning for coastal infrastructure (sea level change is one impact of climate change). However, as of June 2020, the Army had not provided evidence of required training for installation-level planners that incorporates the DOD guidance discussed in this summary. Thus, the recommendation remains open and we will review evidence of such training if that evidence becomes available.

Recommendation: The Secretaries of the Army, Navy, and Air Force should integrate climate change data and projections into the Unified Facilities Criteria standards and periodically revise those standards based on any new projections, as appropriate. (Recommendation 4)

Agency: Department of Defense: Department of the Air Force
Status: Open

Comments: In October 2017, DOD partially concurred with our recommendation. According to a July 2018 Corrective Action Plan provided by DOD, the Office of the Secretary of Defense continues to work with the military departments to evaluate how best to incorporate resilience measures into Unified Facilities Criteria (UFCs), as appropriate. DOD also stated that UFCs are reviewed and revised on a rolling basis. As of June 2020, DOD has not provided evidence of climate change data and projections integrated into UFCs. Thus, the recommendation remains open and as UFCs are updated, we will assess the extent to which the revised versions addresses the recommendation.

Recommendation: The Secretaries of the Army, Navy, and Air Force should integrate climate change data and projections into the Unified Facilities Criteria standards and periodically revise those standards based on any new projections, as appropriate. (Recommendation 4)

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: In October 2017, DOD partially concurred with our recommendation. According to a July 2018 Corrective Action Plan provided by DOD, the Office of the Secretary of Defense continues to work with the military departments to evaluate how best to incorporate resilience measures into Unified Facilities Criteria (UFCs), as appropriate. DOD also stated that UFCs are reviewed and revised on a rolling basis. As of June 2020, DOD has not provided evidence of climate change data and projections integrated into UFCs. Thus, the recommendation remains open and as UFCs are updated, we will assess the extent to which the revised versions addresses the recommendation.

Recommendation: The Secretaries of the Army, Navy, and Air Force should integrate climate change data and projections into the Unified Facilities Criteria standards and periodically revise those standards based on any new projections, as appropriate. (Recommendation 4)

Agency: Department of Defense: Department of the Army
Status: Open

Comments: In October 2017, DOD partially concurred with our recommendation. According to a July 2018 Corrective Action Plan provided by DOD, the Office of the Secretary of Defense continues to work with the military departments to evaluate how best to incorporate resilience measures into Unified Facilities Criteria (UFCs), as appropriate. DOD also stated that UFCs are reviewed and revised on a rolling basis. As of June 2020, DOD has not provided evidence of climate change data and projections integrated into UFCs. Thus, the recommendation remains open and as UFCs are updated, we will assess the extent to which the revised versions addresses the recommendation.

Recommendation: The Secretary of Defense should direct the Office of the Under Secretary of Defense (Policy), the geographic combatant commands, the sub-unified commands, and the Secretaries of the Army, Navy, and Air Force to consider climate change adaptation as they develop DOD's position for future negotiations with host-nation governments on cost-sharing activities, when relevant or appropriate. (Recommendation 5)

Agency: Department of Defense
Status: Open

Comments: In October 2017, DOD partially concurred with our recommendation. According to a July 2018 Corrective Action Plan provided by DOD, the Department is continuing to review and update the processes and criteria governing host-nation cost-sharing negotiations to strengthen or incorporate resilience measures. Since each bilateral agreement is unique, these must be completed on a case-by-case basis. Further, DOD noted that any updates would occur on a "rolling basis." As of June 2020, DOD has not provided evidence that the department has engaged in such updates. Thus, the recommendation remains open and as we become aware of new or updated host-nation cost-sharing agreements, we will assess the extent to which they (or the processes and criteria governing them) address the recommendation.

Recommendation: The Secretary of Defense should direct the Secretaries of the Army, Navy, and Air Force to issue guidance, as appropriate, that calls for more formal coordination mechanisms related to climate change adaptation, such as memorandums of understanding, between DOD installations and surrounding host-nation communities. (Recommendation 6)

Agency: Department of Defense
Status: Open

Comments: In October 2017, DOD partially concurred with our recommendation. According to a July 2018 Corrective Action Plan provided by DOD, the Department is continuing to review guidance for establishing agreements between host-nation communities and DOD installations. Further, DOD noted that any updates would occur on a "rolling basis." As of June 2020, DOD has not provided evidence that the department has engaged in such updates. Thus, the recommendation remains open and as we become aware of new or updated agreements between host-nation communities and DOD installations, we will assess the extent to which they (or the guidance governing them) address the recommendation.

Recommendation: To improve agencies' physical security programs' alignment with the ISC Risk Management Process for Federal Facilities and Standards for Internal Control in the Federal Government for information and monitoring, the Commissioner of U.S. Customs and Border Protection, with regard to the updated Security Policy and Procedures Handbook, should include data collection and analysis requirements for monitoring the performance of CBP's physical security program.

Agency: Department of Homeland Security: United States Customs and Border Protection
Status: Open

Comments: The U.S. Customs and Border Protection issued an updated Physical Security Policy and Procedures Handbook in January 2020, which includes a series of internal controls and physical security performance measures. We have reviewed the handbook and requested additional information from CBP to determine whether it meets ISC's Risk Management Process for Federal Facilities.

Recommendation: To improve agencies' physical security programs' alignment with the ISC Risk Management Process for Federal Facilities and Standards for Internal Control in the Federal Government for information and monitoring, the Secretary of Transportation should direct the FAA Administrator to develop a plan that provides sufficient details on the activities needed and time frames within the date when FAA will implement an improved methodology.

Agency: Department of Transportation
Status: Open

Comments: The Federal Aviation Administration (FAA) has developed, initially tested, and deployed a risk assessment methodology that aligns with the Interagency Security Committee Risk Management Process for Federal Facilities. In August and September of 2019, FAA trained some staff on the new methodology, which is being integrated into the facility security reporting system. After resolving any software compatibility issues, completing all necessary testing and training, and issuing the associated security policy, FAA expects to fully implement the methodology by December 31, 2020.

Recommendation: To improve agencies' physical security programs' alignment with the ISC Risk Management Process for Federal Facilities and Standards for Internal Control in the Federal Government for information and monitoring, the Secretary of Transportation should direct the FAA Administrator to update FAA's policy to require the use of a methodology that fully aligns with the ISC's Risk Management Process for Federal Facilities for assessing all undesirable events, considering all three factors of risk, and documenting all deviations from the standard countermeasures.

Agency: Department of Transportation
Status: Open

Comments: The Federal Aviation Administration (FAA) drafted an updated facility security policy and distributed it for comment in October 2019. It received over 300 comments that are currently being addressed. Once completed, the policy is to incorporate a methodology that fully aligns with the Interagency Security Committee Risk Management Process for Federal Facilities for assessing all undesirable events, considering all three factors of risk, and documenting all deviations from the standard countermeasures. FAA plans to publish the new policy to coincide with the implementation of its risk-assessment methodology by December 31, 2020.

Recommendation: To improve agencies' physical security programs' alignment with the ISC Risk Management Process for Federal Facilities and Standards for Internal Control in the Federal Government for information and monitoring, the Secretary of Transportation should direct the FAA Administrator to update FAA's policy to include ongoing monitoring of physical security information.

Agency: Department of Transportation
Status: Open

Comments: The Federal Aviation Administration's (FAA) update of its facility security policy and its associated databases should help to improve the monitoring and use of physical security information to better assist with risk assessment decision-making. In February 2020, FAA officials said that its facility security reporting system is to be improved with new metrics and executive level reporting. Such improvements are to result in increased program oversight, risk awareness, and mitigation planning. These improvements are to be completed by December 31, 2020 to coincide with full implementation of the components of the risk management framework, such as the risk assessment methodology, personnel training, and policy publication.

Recommendation: To improve agencies' physical security programs' alignment with the ISC Risk Management Process for Federal Facilities and Standards for Internal Control in the Federal Government for information and monitoring, the Secretary of Agriculture should include data collection and analysis requirements for monitoring the performance of agencies' physical security programs, in the department's revised physical-security manual.

Agency: Department of Agriculture
Status: Open

Comments: The U.S. Department of Agriculture is drafting a revised physical-security regulation and manual that is to align with risk management processes, including a tracking and monitoring component. It expects to implement a revised process by the end of 2020.

Recommendation: To improve agencies' physical security programs' alignment with the ISC Risk Management Process for Federal Facilities and Standards for Internal Control in the Federal Government for information and monitoring, the Secretary of Agriculture should direct the Administrator of the Agricultural Research Service and the Chief of the Forest Service to implement and monitor a long-term assessment schedule with key milestones to ensure that higher-level facilities are reassessed at least once every 3 years.

Agency: Department of Agriculture
Status: Open

Comments: The U.S. Department of Agriculture (USDA) recognizes the need to develop and implement a database to track and monitor physical security assessment schedules across all of its components. As a result, USDA plans to request funding in the President's Budget for fiscal year 2021 to design and build such a database. If sufficient funding is secured and development efforts go as planned, the agency anticipates having the database operational by the end of 2021.

Recommendation: The Director of the National Gallery of Art should direct the Office of Protection Services to ensure that program goals and performance measures linked to those goals are included as part of the master security plan and develop a timeline for completion of this plan.

Agency: National Gallery of Art
Status: Open

Comments: The National Gallery concurred with this recommendation and said it would take steps to implement it. In February 2019, the National Gallery approved the Office of Protection Services' 5-year strategic plan, which included goals for security. However, as of June 2020, work to establish performance measures was not yet complete. We will continue to monitor the National Gallery's progress in implementing this recommendation

Recommendation: To ensure that the elements of the agency's process for making asset maintenance decisions are achieving desired outcomes, the Secretary of the Interior should direct the Director of the Park Service to evaluate the Capital Investment Strategy and its results to determine if it is achieving its intended outcomes or if changes need to be made.

Agency: Department of the Interior
Status: Open

Comments: According to NPS officials, the agency is currently working to address this recommendation and expects to complete it in August 2020. GAO will update the status of the recommendation as soon as possible thereafter.

Recommendation: To determine how the use of RRCs and home confinement contribute to its goal of helping inmates successfully reenter society, and to better enable BOP to adjust its policies and procedures for the optimal use of these alternatives, as necessary and within statutory requirements, the Director of BOP should develop performance measures by which to help assess program outcomes.

Agency: Department of Justice: Bureau of Prisons
Status: Open

Comments: In November 2017, BOP reported that it developed a revised Statement of Work (SOW) for use with its RRC contractors that requires the contractors to track and report to BOP on, among other things, the number of placements into and releases from RRCs and home confinement; revocations from RRCs or home confinement; and RRC and home confinement residents that have secured full, part-time, or temporary employment. In a March 2019 update, BOP stated that it awarded nine contracts under the 2017 SOW and plans to use the data required under the SOW to conduct annual performance appraisals for RRCs after each performance period and intends to use this information in the future to track outcomes of the programs (e.g., employment, housing, individualized goals of offender). In a May 2020 update, BOP stated that that it had just received the first quarter of data from many of its RRC providers and that it continues to work with the providers to refine the data to determine if it can be utilized to develop performance measures. BOP stated that it anticipates being able to provide an update on this phase of their effort in September 2020. While the collection of this data is an important step, to fully implement this recommendation, BOP also needs to define and develop performance measures by which it can use such data to report and assess outcomes program-wide. We will continue to monitor BOP's ongoing efforts.

Recommendation: To improve DOD's ability to oversee its inventory of leased real property, aimed at improving the accuracy and completeness of data in RPAD, the Secretary of Defense should direct the Secretary of the Army to enforce DOD's Real Property Inventory (RPI) Reporting Guidance, which states that for multiple assets associated with a single lease, the military departments and WHS must provide a breakout of the annual rent plus other costs for each asset on the same lease, to avoid overstating costs associated with such leases.

Agency: Department of Defense
Status: Open

Comments: DOD concurred with GAO's March 2016 recommendation to enforce DOD's Real Property Inventory (RPI) Reporting Guidance to break out the annual rent plus other costs for each asset on the same lease to avoid overstating the costs associated with such leases. In July 2019, DOD provided GAO a copy of its annual guidance for end of year submission of its real property inventory, including notes and timeline for submission. DOD stated in its Corrective Action Plan that this annual guidance provided the requirements for proper submission of data to meet the issues identified in this recommendation. However, the documentation provided is generic language and does not provide any detailed information to support closure of this recommendation. In August 2020, we requested documentation that shows that the DOD has reiterated its RPI Reporting Guidance and that military departments and WHS have made the needed adjustments in the reporting of their leased facilities to show a breakout of the annual rent plus other costs for each asset on the same lease. We will continue to monitor this area and update this if DOD provides information showing that DOD has reiterated its RPI Reporting Guidance and that military departments and WHS have adjusted the reporting of their leased facilities to show a breakout of the annual rent plus other costs for each asset on the same lease. .

Recommendation: To improve DOD's ability to ensure that its leased facilities are secure, the Secretary of Defense should direct the Under Secretary of Defense (Intelligence) to request reports from the Federal Protective Service for all leased facilities on a periodic basis as determined necessary for oversight. At a minimum, the Under Secretary should request (1) the results of the assessments, (2) the date on which the last assessment was completed for each facility and the date for which the next scheduled assessment is planned, and (3) information on whether these dates meet the time frames established by Interagency Security Committee standards.

Agency: Department of Defense
Status: Open

Comments: DOD concurred with GAO's March 2016 recommendation. In its July 2019 Corrective Action Plan, DOD stated that it had coordinated with the Federal Protective Service (FPS) to obtain data pertaining to the 677 DOD facilities across 539 total locations (i.e., some locations have multiple tenants, hence more facilities than locations) for which FPS provides physical security. DOD stated that the data provided to them by FPS shows that, as of July 2018, 98 percent of DOD leased facilities met the established time frame for completing assessments and remaining 2 percent (15 of the 677 facilities) had out-of-date assessments. In January 2020, DOD provided GAO with the raw data it received from the Federal Protective Service that DOD said supported these assertions. While this data included the last and next facility assessment dates for each facility, along with several other variables, it did not include sufficient information for us to replicate DOD's analysis that 98 percent of assessments were completed in the 3 to 5 year period. We will continue to monitor this area and will update if DOD provides information that more fully explains DOD's analysis.

Recommendation: To improve DOD's ability to oversee its inventory of leased real property, aimed at improving the accuracy and completeness of data in RPAD, the Secretary of Defense should direct the Assistant Secretary of Defense (Energy, Installations and Environment) to modify the office's Real Property Information Model to include a data element to capture the square footage for each lease of space in a single building and also make a corresponding change to its Real Property Inventory (RPI) Reporting Guidance to require that the square footage for each individual lease be reported when multiple leases exist for a single building, to avoid overstating the total square footage assigned to each lease in RPAD.

Agency: Department of Defense
Status: Open

Comments: DOD did not concur with GAO's March 2016 recommendation to capture the total square footage assigned to each individual lease when multiple leases exist for a single building and make a corresponding change to its guidance to avoid overstating the total square footage assigned to each lease in RPAD. In its comments, DOD stated that it agreed that the issue we identified existed regarding multiple leases that are assigned the same building (leases managed by WHS in the National Capital Region), but that DOD did not agree with GAO's recommended solution to this issue. DOD stated that it believed that the underlying cause for overstating the total square footage for these records in RPAD was a data aggregation issue. DOD stated that its Data Analytics and Integration Support (DAIS) platform that was in the process of being developed would include the capability to capture square footage for multiple leases in a single asset. GAO is not wedded to a particular solution, only that the issue be resolved to improve the accuracy and completeness of the data. As of August 2020, DAIS is fully operational. We will continue to monitor this area and will update if DOD provides information to support that DIAS includes the total square footage assigned to individual leases when multiple leases are assigned to the same building.

Recommendation: The Administrator of the General Services Administration should develop a legislative proposal to enhance accountability for government-wide implementation of the Act. GSA should consider including the following in its proposal: (1) establishing authorities for a single agency to monitor and enforce implementation of the Act; (2) establishing agency responsibilities for reporting progress on implementation of the Act; (3) establishing agency responsibilities for assessing employee skill levels related to the Act and identifying training that allows employees to develop and retain skills required by the Act; and (4) establishing an interagency group to further government-wide collaboration on implementation of the Act.

Agency: General Services Administration
Status: Open

Comments: As of November 2019, GSA has informed us that it submitted a legislative proposal as part of the FY 2018 and FY 2019 budget cycle that was subsequently not included in the President's budget. We have asked GSA to provide us a copy of this proposal. We will evaluate whether this proposal is sufficient to close this recommendation.

Recommendation: To help achieve and sustain public acceptance for future spent nuclearfuel management efforts, the Secretary of the Department of Energy should develop and implement a coordinated outreach strategy for providing information to specific stakeholders and the general public on federal activities related to managing spent nuclear fuel.

Agency: Department of Energy
Status: Open

Comments: In 2015 and 2016, the Department of Energy (DOE) solicited public comments as part of a policy to develop a consent-based siting process for high-level radioactive waste management facilities. However, DOE's solicitation of public comments does not reflect a coordinated outreach strategy to achieve and sustain public acceptance for the decades required to site, license, construct, and operate waste management facilities. As of March 2020, we are following up with DOE to determine the status of the agency's response to this recommendation.

Recommendation: In order to improve the military services' ability to make facility investment decisions in accordance with DOD's strategic direction to include climate change adaptation considerations and additionally, to demonstrate an emphasis on proposing projects with an adaption component to installation planners, the Secretary of Defense should direct the Secretaries of the military departments to clarify instructions associated with the processes used to compare potential military construction projects for approval and funding so that, at a minimum, climate change adaptation is considered as a project component that may be needed to address potential climate change impacts on infrastructure.

Agency: Department of Defense
Status: Open

Comments: In May 2014, DOD concurred with our recommendation. Since then, DOD has made some limited progress toward integrating considerations of climate change into the processes of certain military services' military construction programs. For example, in 2016 briefing slides presented to congressional staff, the Army noted that two military construction projects were sited in a manner specifically designed to mitigate the impacts of climate change. However, as of March 2020, DOD had not provided us with evidence that the department's components have clarified instructions associated with the processes used to compare potential military construction projects for approval and funding. Thus, the recommendation remains open.

Recommendation: To ensure that information entered into CMS's complaints database is reliable and consistent, the Administrator of CMS should identify issues with data quality and clarify guidance to states about how particular fields in the database should be interpreted, such as what it means to substantiate a complaint.

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: HHS concurred with this recommendation. In November 2014, CMS officials reported that the agency's Survey and Certification Group was in the early stages of a planned multi-year review of all of its business processes, including those related to nursing home complaint investigations. Officials stated that, as part of that review, agency staff would seek to provide clarification on all aspects of the complaint process, including what it means to substantiate a complaint. In July 2019 CMS officials said some actions have been taken and that they would forward us information. We will update the status of this recommendation when we receive additional information.

Recommendation: To strengthen CMS's assessment of state survey agencies' performance in the management of nursing home complaints, the Administrator of CMS should conduct additional monitoring of state performance using information from CMS's complaints database, such as additional timeliness measures.

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: In November 2014, CMS officials reported that the fiscal year 2014 protocol for assessment of state agency performance includes a new measure that tracks how soon after the completion of a complaint investigation a state agency uploads data from that investigation to CMS's complaint tracking system. However, the protocol does not call for assessment of the number of days by which state survey agencies miss the deadlines for some complaint investigations--a measure that we suggested could provide a more comprehensive picture of state agency performance. In July 2019 CMS officials said some actions have been taken and that they would forward us information. We will update the status of this recommendation when we receive additional information.

Recommendation: To strengthen and increase accountability of state survey agencies' management of the nursing home complaints process, the Administrator of CMS should clarify guidance to the state survey agencies about the minimum information that should be conveyed to complainants at the close of an investigation.

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: HHS agreed that CMS needed to take steps to strengthen and increase accountability of state survey agencies' management of nursing home complaints. In November 2014, CMS officials reported that while they believed the CMS State Operations Manual, which specifies procedures for addressing complaints, provides significant guidance regarding the information that state agencies should convey to complainants at the close of an investigation, they would review the guidance to identify any needed changes. In July 2019 CMS officials said some actions have been taken and that they would forward us information. We will update the status of this recommendation when we receive additional information.

Recommendation: To strengthen and increase accountability of state survey agencies' management of the nursing home complaints process, the Administrator of CMS should provide guidance encouraging state survey agencies to prioritize complaints at the level that is warranted, not above that level.

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: HHS agreed that CMS needed to take steps to strengthen and increase accountability of state survey agencies' management of the nursing home complaints process and stated that CMS would provide clarification and guidance to states to ensure complaints were prioritized at the appropriate level. However, in CMS's fiscal year 2014 protocol for assessment of state agency performance, the prioritization standard still required only that complaints be assigned a priority level at or above the level assigned by CMS reviewers. We remain concerned that defining the standard this way may create an incentive for survey agencies to prioritize some complaints at a higher level than is warranted--which could increase workload and potentially jeopardize the timeliness of investigations that warrant the higher priority level. In July 2019 CMS officials said some actions have been taken and that they would forward us information. We will update the status of this recommendation when we receive additional information.