Recommendation: ODCFO should update the CAP template provided in its guidance to assist components in developing CAPs to include the year deficiencies are first identified data element defined in the Implementation Guide for OMB Circular A-123. (Recommendation 1)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: ODCFO should update the NFR Database with a field to record the year deficiencies are first identified. (Recommendation 2)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: ODCFO should incorporate appropriate steps to improve its CAP review process, including ensuring that (1) data elements not included in CAPs are appropriately identified and communicated to components and resolved, (2) NFRs are appropriately linked to the correct CAPs to address them, and (3) components document their rationale for accepting the risk associated with certain deficiencies and appropriately identify such instances in the NFR Database. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: ODCFO should update DOD guidance to instruct DOD and components to document root-cause analysis when needed to address deficiencies auditors identified. (Recommendation 4)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: ODCFO should include appropriate steps in its monthly NFR Database review process to evaluate and follow-up on previously identified exceptions to ensure that they are resolved timely. (Recommendation 5)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Under Secretary of Defense (Comptroller) should, in collaboration with the Under Secretary of Defense (Acquisition and Sustainment), develop and implement a DOD-wide strategy to remediate real property asset control issues. (Recommendation 1).

Agency: Department of Defense
Status: Open

Comments: DOD concurred with this recommendation and stated that it was committed to placing increased leadership emphasis on real property asset controls to ensure mission readiness, audit readiness, testing for existence and completeness, and maintaining internal controls.

Recommendation: The Under Secretary of Defense (Comptroller) should, in collaboration with the Under Secretary of Defense (Acquisition and Sustainment), develop department-wide instructions for performing the E&C verifications. (Recommendation 2).

Agency: Department of Defense
Status: Open

Comments: DOD concurred with this recommendation and stated that it was committed to placing increased leadership emphasis on real property asset policies and instructions to ensure consistent and repeatable existence and completeness verifications.

Recommendation: The Secretary of the Army should direct the Accountability and Audit Readiness Directorate under the Assistant Secretary of the Army, Financial Management and Comptroller, to enhance the directorate's policies and procedures for (1) tracking and prioritizing all financial management-related audit findings and recommendations under its purview and (2) developing and monitoring CAPs for all such recommendations so that they include sufficient details, such as the criteria used to prioritize the CAPs, the recommended CAP elements, and the process for monitoring and documenting the progress and status of CAPs.

Agency: Department of Defense: Department of the Army
Status: Open
Priority recommendation

Comments: The Army concurred with this recommendation. The Army stated that the Accountability and Audit Readiness Directorate has completed actions to enhance its current standard operating procedures to include (1) updating its corrective action plan (CAP) database and reporting tool, (2) documenting its reporting procedures, and (3) updating its CAP template to include additional elements recommended by the Implementation Guide for OMB Circular A-123. In addition, the Army stated that its policies and procedures include steps to incorporate external financial management-related audit findings assigned to the Accountability and Audit Readiness Directorate by the Internal Review Directorate and that the existing process the Army uses to prioritize findings and the related CAPs and to monitor the progress and status of CAPs has been documented. We reviewed Army's documentation that was provided in January 2020. Army's documentation did not show that it has a process for ensuring that all financial management related findings and recommendations are identified and tracked. To implement this recommendations Army needs to enhance their policies and procedures related to tracking and monitoring the status of these audit findings.

Recommendation: The Secretary of the Air Force should design and document a comprehensive process to ensure that the complete universe of all financial management-related findings and recommendations from all audit sources is identified and tracked.

Agency: Department of Defense: Department of the Air Force
Status: Open
Priority recommendation

Comments: The Air Force concurred with this recommendation. In January 2018, the Air Force stated that it continues to develop a process for identifying and tracking financial management-related findings and recommendations from all audit sources by updating its process guidance. In August 2019, we received draft guidance that Air Force is developing as guidance and procedures for a universe of financial management-related findings and recommendations. In January 2020, we also received a list of the Air Force deficiencies being tracked in the Office of the Under Secretary of Defense (Comptroller) (OUSD(C)) database. After assessing the provided documentation, we found that the draft does not include procedures for identifying GAO, DODOIG, and Air Force Audit Agency (AFAA) findings and the database did not include deficiencies identified by those external auditors. As a result of our review of the documentation provided, we determined that the actions taken were not sufficient to close the recommendation.

Recommendation: The Secretary of the Air Force should update the Air Force's written policies and procedures for prioritizing financial management-related audit findings and recommendations from all audit sources and for developing and monitoring CAPs so that they include sufficient details. These procedures should include the following details: (1) The process to be followed for prioritizing the financial management-related findings and recommendations from audit sources. (2) The guidance for developing CAPs for all financial management-related audit findings and recommendations from all audit sources to include complete details, including the elements recommended by the Implementation Guide for OMB Circular A-123. (3) The process for monitoring the status of the CAPs for all financial management-related audit findings and recommendations from all audit sources, including the documentation to support any corrective actions taken, as recommended by the Implementation Guide for OMB Circular A-123.

Agency: Department of Defense: Department of the Air Force
Status: Open
Priority recommendation

Comments: The Air Force concurred with this recommendation. In January 2018, the Air Force stated that its Air Force Deficiency Remediation Tracking processes and guides were being refined. In December 2019, Air Force provided a document titled "NFR Prioritization Process." We found that this document included Air Force's priority categories. However, the document does not include information on determining the priority level or applying the priority levels when addressing the deficiencies. We also received a copy of Air Force's guide for the Corrective Action Plan (CAP) process dated July 2019. We found that this guide does not fully incorporate CAP development for deficiencies from all sources. Additionally, the guide does not provide information on the process for (1) determining resources and other requirements for remediating the deficiency, (2) conducting a cost benefit analysis, and (3) developing criteria for validating that the deficiency has been remediated. The guide also includes a template for conducting a root cause analysis. However, the instructions for conducting a root cause analysis are somewhat limited for determining the initial cause or underlying reason for the deficiency. Per the guide, the Air Force uses the Office of the Under Secretary of Defense (Comptroller) (OUSD(C)) database to monitor and report on Air Force's deficiencies and remediation CAP status. We obtained a listing of the NFRs and related CAPS in the database as of December 2019. We found that deficiencies from all audit sources were not included in the listing, only the independent public accountant's NFRs. The results of our review of a limited number of CAPs indicate that Air Force staff does not always comply with the Air Force's CAP requirements. As a result of our assessment of the Air Force documentation, we determined that the actions taken were not sufficient to close the recommendation.

Recommendation: To improve DOD management's process for monitoring the military services' audit remediation efforts and to provide timely and useful information to stakeholders as needed, the Secretary of Defense should direct the Secretary of the Army, the Secretary of the Navy, and the Secretary of the Air Force to prepare and submit to the Under Secretary of Defense (Comptroller), on at least a bimonthly basis for availability at the FIAR Governance Board meetings, a summary of key information included in the CAPs that at a minimum contains the data elements recommended by the Implementation Guide for OMB Circular A-123 for each CAP related to critical capabilities for achieving audit readiness.

Agency: Department of Defense
Status: Open
Priority recommendation

Comments: DOD concurred with this recommendation. DOD stated that it solicits input on a bi-monthly basis, on critical capability corrective action plans (CAPs) at a summary level. This information is provided routinely at regularly scheduled FIAR Governance Board meetings. DOD also stated that an updated notice of finding and recommendation (NFR) form template is being developed and will be provided to the military services to use for reporting this information so that it will include the recommended standard data elements outlined in OMB Circular A-123 to provide greater transparency into the nature of remediation plans. DOD also stated that FIAR Guidance will be updated to explicitly state that military services should include the OMB recommended standard data elements in CAPs. To implement this recommendation, DOD needs to provide documentation that shows that the military services are able to provide a summary of key information in the corrective action plans that at a minimum contains data elements recommended by the Implementation Guide for OMB Circular A-123. .

Recommendation: To reasonably assure that DOD management and external stakeholders have a comprehensive picture of the status of corrective actions needed for audit readiness throughout the department, the Secretary of Defense should direct the Under Secretary of Defense (Comptroller) to prepare a consolidated CAP management summary on a bimonthly basis that includes the data elements referred to above on the status of all CAPs related to critical capabilities for the military services and for the service providers and other defense organizations.

Agency: Department of Defense
Status: Open
Priority recommendation

Comments: DOD partially concurred with this recommendation. According to DOD, the military services already provide summary-level updates on their critical capability corrective action plans (CAPs) at FIAR Governance Board meetings. It also stated that the template that is used to present CAPs to the FIAR Governance Board meetings at the summary level has been updated to align CAPs to critical capabilities. DOD still needs to address how all of the data elements from the Implementation Guide for OMB Circular A-123 will be summarized or otherwise reported for all CAPs pertaining to critical capabilities across the Department. In addition, DOD stated that because the Under Secretary of Defense (Comptroller) takes responsibility for maintaining, monitoring, and reporting on the status of CAPs for the service providers and other defense organizations and of DOD-wide issues, the Comptroller will also summarize this information. However, DOD has not clarified what information from the military services will be summarized. To implement this recommendation, DOD needs to provide documentation that shows the Comptroller has prepared a consolidated CAP management summary on a bimonthly basis.

Recommendation: To improve the Navy's implementation of the FIAR Guidance for its General Fund FBWT FIP and facilitate efforts to achieve SBR auditability, the Secretary of the Navy should direct the Assistant Secretary of the Navy, Financial Management and Comptroller, to prepare a level I quantitative drilldown in accordance with the FIAR Guidance.

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: The Navy concurred with this recommendation and stated that it has actions planned, taken, or under way to prepare a quantitative drilldown. In September 2017, Navy provided a listing of certain systems (DCAS, GLs, DDRS-B, and DDRS-AFS) it considered as Level 1 assessable units. However, the listing did not include a drilldown from the financial statement amounts through DDRS-AFS, DDRS-B, and DCAS to the receipt and disbursement source systems. In July 2020, Navy officials stated that Navy is implementing a new system that will enable them to complete a quantitative drill down for its Fund Balance with Treasury (FBWT). The new system is not expected to be fully implemented until March 2021. In the interim, certain FBWT reconciliations are performed at DFAS, that may provide a drilldown capability of FBWT as reported in financial statements to the applicable general ledger amounts.

Recommendation: To improve the Navy's implementation of the FIAR Guidance for its General Fund FBWT FIP and facilitate efforts to achieve SBR auditability, the Secretary of the Navy should direct the Assistant Secretary of the Navy, Financial Management and Comptroller, to prioritize audit readiness efforts for the key FBWT systems, prepare an audit strategy that identifies for each system (1) the Navy's plan for assessing the system to gain assurance that the system can be relied on; (2) the assessment types, including prioritizing the assessments based on qualitative and quantitative factors for each system; and (3) planned start and completion dates of these assessments for each system.

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: The Navy concurred with this recommendation and stated that it has actions planned, taken, or under way to prioritize audit readiness efforts for key Fund Balance with Treasury (FBWT) systems. In September 2017, Navy provided documentation for three systems, but this documentation did not address corrective actions for ineffective controls and the expected completion dates. Further, during our audit, Navy provided a list of 22 relevant systems. In July 2020, Navy officials stated that they are preparing an audit strategy for each system, and documenting control activities and computer controls for significant systems. We will continue to follow-up on the status of this recommendation.

Recommendation: To improve the Navy's implementation of the FIAR Guidance for its General Fund FBWT FIP and facilitate efforts to achieve SBR auditability, the Secretary of the Navy should direct the Assistant Secretary of the Navy, Financial Management and Comptroller, to prepare, in accordance with FIAR Guidance, the documentation of control activities and information technology general computer controls for significant systems; system certifications or accreditations; system, end user, and systems documentation locations; and hardware, software, and interfaces.

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: The Navy concurred with this recommendation and stated that it had actions planned, taken, or under way to document control activities, information technology general computer controls for significant systems, systems documentation locations, and hardware, software, and interfaces. In September 2017, Navy provided documentation for 3 systems, but the documentation did not include system certifications or accreditations; system, end user, and systems documentation locations; and hardware, software, and interfaces. Further, during our audit, Navy provided a list of 22 relevant systems. In July 2020, a Navy official told us that they are preparing an audit strategy for each system, and documenting control activities and computer controls for significant systems. We will continue to monitor Navy's progress addressing this recommendation.

Recommendation: To improve the Navy's implementation of the FIAR Guidance for its General Fund FBWT FIP and facilitate efforts to achieve SBR auditability, the Secretary of the Navy should direct the Assistant Secretary of the Navy, Financial Management and Comptroller, to prepare an internal control assessment document for each assessable unit, summarizing control activities that are appropriately designed and in place.

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: The Navy concurred with this recommendation and stated that it had actions planned, taken, or under way to prepare an internal control assessment document. In September 2017, Navy provided support for actions taken to address this recommendation. However, the documentation provided did not summarize controls by assessable unit (DCAS, DDRS-B, or systems). Instead controls were listed by function (Treasury Reporting, Audit Readiness, and Departmental Reporting). In July 2020, a Navy official stated that documentation of overall Fund Balance with Treasury (FBWT) controls is in process and they are finalizing the Risk Control Matrix for FBWT to include controls at DFAS and at Treasury. The Rick Control Matrix is estimated to be completed by the end of August 2020. We will continue to monitor the progress in addressing this recommendation.

Recommendation: To provide reasonable assurance that the property, equipment, and software transactions are properly tracked and capitalized or expensed as appropriate, the Director of CFPB should direct the program offices to require vendors to provide detailed invoices with costs broken out by project.

Agency: Consumer Financial Protection Bureau
Status: Open

Comments: During our fiscal year 2019 audit, we continued to find control deficiencies over CFPB's accounting for its property, equipment, and software. CFPB was still in the process of working with its Office of Procurement and program offices to require more detailed invoices with costs broken out by project. We will continue to evaluate CFPB's actions to address this recommendation during our fiscal year 2020 financial statement audit.

Recommendation: The IRS Commissioner should direct the appropriate IRS officials to determine the reason(s) why staff did not always comply with IRS's established policies and procedures related to initiating, monitoring, and reviewing the monitoring of manual refunds and, based on this determination, establish a process to better enforce compliance with these requirements.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During fiscal year 2019, we identified instances where staff did not comply with IRS's policies and procedures related to monitoring and reviewing the monitoring of manual refunds. IRS officials stated that the Wage and Investment (W&I) organization determined that a fully automated process to perform monitoring of manual refunds is the optimal solution to address, at an enterprise level, deficiencies associated with reliance on employees to monitor refunds in process and take appropriate action when potential duplicate or erroneous refund conditions are encountered. In addition, IRS officials indicated that the W&I organization will develop business requirements and request programming through the Unified Work Request process; however, limited resources and competing priorities prevent the identification of an implementation date. As a result, IRS will place this recommendation on hold until an implementation date is known.

Recommendation: The IRS Commissioner should direct the appropriate IRS officials to identify the cause of and implement a solution for dealing with the periodic backlogs of ICO inventory that is hampering the performance of quality reviews.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During fiscal year 2019, the Wage and Investment (W&I) organization determined that periodic backlogs of Input Correction Operation (ICO) inventory were caused by a combination of factors, such as systemic issues, fluctuations in projected filings, and hiring challenges. IRS officials stated that the W&I organization has also identified and implemented several strategies to address ICO backlogs and mitigate the impact on the quality review program, including hiring more staff in ICO functions, using seasonal employees, cross-training, overtime, transferring of work, and updating the Internal Revenue Manual. Since IRS provided us with this information near the end of our fiscal year 2019 audit in September 2019, we will evaluate IRS's actions to address this recommendation during our fiscal year 2020 audit.

Recommendation: The IRS Commissioner should direct the appropriate officials to establish and implement monitoring procedures designed to reasonably assure that the key detailed information for tangible capitalized P&E is properly recorded and updated in the KISAM system.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS established the Asset Management Program Monitoring and Review procedure, effective October 1, 2016, for performing quarterly sample reviews of Information Technology (IT) assets in the Knowledge, Incident/Problem, Service Asset Management (KISAM) system. In September 2017, IRS also revised the Internal Revenue Manual to require Facilities Management and Security Services territory managers or section chiefs to review KISAM key data elements for non-IT assets to verify that they are correct and updated. However, during our fiscal year 2018 floor-to-book inventory testing, we identified exceptions where (1) a key detailed information element (e.g., building code) for property and equipment (P&E) assets was not properly recorded in KISAM and (2) P&E assets found on the floor did not have asset records in KISAM. We will conduct inventory testing and follow-up to determine the status of this issue during our audit of IRS's fiscal year 2020 financial statements.

Recommendation: The Commissioner of IRS should direct the appropriate IRS officials to establish procedures to monitor whether non-IRS contractors with unescorted physical access to IRS facilities are receiving unauthorized access awareness training.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: During fiscal year 2018, Facilities Management and Security Services (FMSS) established training requirements for non-IRS contractors with unescorted physical access to IRS facilities and communicated these requirements to its employees. However, FMSS did not establish procedures to monitor whether these non-IRS contractors receive the required unauthorized access awareness training. In addition, during our fiscal year 2019 audit, we found instances in which non-IRS contractors with unescorted physical access to an IRS facility did not complete the required training.

Recommendation: The Commissioner of IRS should direct the appropriate IRS officials to determine why staff did not consistently comply with IRS's existing requirements for the final candling of receipts at service center campuses and lockbox banks, including logging remittances found during final candling on the final candling log at the time of discovery, safeguarding the remittances at the time of discovery, transferring the remittances to the deposit unit promptly, and passing one envelope at a time over the light source, and based on this determination, establish a process to better enforce compliance with these requirements.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. During fiscal year 2017, IRS held a meeting with Submission Processing executives, staff, and the Receipt and Control Operation managers from all five service center campuses (SCC), and as a result of the meeting, IRS developed an action plan to resolve the residual risks associated with candling at the SCCs. IRS officials stated that during fiscal year 2020, it will complete the developed action plan.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB, to establish and implement policies and procedures for accounting for and reporting all significant General Fund activity and balances, obtaining assurance on the reliability of the amounts, and reconciling the activity and balances between the General Fund and federal entities.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Over the past few years, Treasury has made progress by (1) improving the accounting for and reporting of General Fund transactions and balances, (2) working to resolve significant differences between the General Fund and federal entity trading partners, and (3) including differences involving General Fund activity and balances in the quarterly scorecard process. However, significant differences between the General Fund and federal entity trading partners existed as of the end of fiscal year 2019. Also, Treasury continues to work on obtaining audit assurance on the activity and balances. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB, to establish a formalized process to require the performance of additional audit procedures specifically focused on intragovernmental activity and balances between federal entities to provide increased audit assurance over the reliability of such information.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury did not perform corrective actions in FY 2019 to address this recommendation. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: In order to improve NMB's planning and make the most effective use of its limited resources, the Chairman of the National Mediation Board should develop and fully implement key components of an information security program in accordance with the Federal Information Security Management Act of 2002.

Agency: National Mediation Board
Status: Open

Comments: In February 2020, we determined that NMB had taken some steps to further implement key information security practices, but had not fully implemented this recommendation. We reported in GAO-20-236 that NMB continued to only partially follow the eight key information security practices in accordance with the Federal Information Security Management Act (FISMA). NMB must take other steps, such as providing risk assessment documentation of its enterprise network for fiscal year 2019. NMB officials stated that the agency plans to address several of these practices by the end of fiscal year 2020. They further noted that they hired a Chief Information Officer and planned to hire additional staff and employ contractors to aid in these efforts.

Recommendation: In order to improve NMB's planning and make the most effective use of its limited resources, the Chairman of the National Mediation Board should establish a privacy program that includes conducting privacy impact assessments and issuing system of record notices for systems that contain personally identifiable information.

Agency: National Mediation Board
Status: Open

Comments: In February 2020, we reported in GAO-20-236 that NMB had taken some steps to implement information privacy practices, such as designating a privacy officer. However, NMB must take additional steps, such as specifying whether a system of records notice would be developed, as required by the Office of Management and Budget.

Recommendation: To improve the reliability of the information presented in the CFS budget statements, the Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish and implement effective procedures for reporting amounts in the CFS budget statements that are fully consistent with the underlying information in significant federal entities' audited financial statements and other financial data.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury continued to develop its budget deficit/surplus and cash reconciliation procedures. Specifically, Treasury performed a preliminary analysis on several federal entities' implementation of the new Statement of Federal Financial Accounting Standards No. 53, Budget and Accrual Reconciliation (BAR), and noted inconsistencies in the way each entity populated line items in the BAR. Treasury and OMB provided additional guidance for the BAR in OMB Circular No. A-136 and on the Treasury U.S. Standard General Ledger website, including a BAR crosswalk template. However, additional work is needed to reconcile line items to audited federal entity financial statements. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: To improve the reliability of the information presented in the CFS budget statements, the Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish and implement effective procedures for identifying and reporting all items needed to prepare the CFS budget statements.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury continued to make improvements in fiscal year 2019 by implementing procedures, publishing guidance, and developing new transaction codes to improve the accounting for and reporting of General Fund transactions and balances that Treasury uses to compute the budget deficit reported in the consolidated financial statements. However, additional work is needed in determining the appropriate presentation for the reconciling items, which could affect the line items included. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The Acting Commissioner of Internal Revenue should direct the appropriate IRS officials to perform a risk assessment to determine the appropriate level of Integrated Data Retrieval System (IDRS) access that should be granted to employee groups that handle hard-copy taxpayer receipts and related sensitive taxpayer information as part of their job responsibilities.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. In October 2019, the functions within the Small Business/Self-Employed organization completed risk assessments to determine the appropriate level of Integrated Data Retrieval System (IDRS) access that should be granted to the employees who handle hard-copy taxpayer receipts and related sensitive taxpayer information as part of their job responsibilities. In addition, IRS officials stated that during fiscal year 2020, the Taxpayer Advocate Service organization, in coordination with the Information Technology organization, as necessary, will complete a risk assessment of all employee groups that handle hard-copy taxpayer receipts and related sensitive taxpayer information to determine the most appropriate level of IDRS access.

Recommendation: The Acting Commissioner of Internal Revenue should direct the appropriate IRS officials to, based on the results of the risk assessment, update the Internal Revenue Manual (IRM) accordingly to specify the appropriate level of IDRS access that should be allowed for (1) remittance perfection technicians and (2) all other employee groups with IDRS access that handle hard-copy taxpayer receipts and related sensitive information as part of their job responsibilities.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. IRS officials stated that by October 2020, the Small Business/Self-Employed, Taxpayer Advocate Service, and Tax Exempt & Government Entities organizations will work with the Information Technology organization, as necessary, to ensure that the applicable Internal Revenue Manual section(s) are revised for any policy changes on (1) risk mitigation, including specifying the appropriate level of Integrated Data Retrieval System access that should be allowed and (2) risk acceptance for affected employee groups, as needed.

Recommendation: The Acting Commissioner of Internal Revenue should direct the appropriate IRS officials to establish procedures to implement the updated IRM, including required steps to follow to prevent (1) remittance perfection technicians and (2) all other employee groups that handle hard-copy taxpayer receipts and related sensitive information as part of their job responsibilities from gaining access to command codes not required as part of their designated job duties.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. IRS officials stated that by October 2020, the Small Business/Self-Employed, Taxpayer Advocate Service, and Tax Exempt & Government Entities organizations will work with the Information Technology organization, as necessary, to establish procedures to prevent affected employees from gaining access to command codes not required as part of their designated job duties, as needed.

Recommendation: While creating control systems at the same time that the emergency programs were being designed and implemented posed unique challenges, the recent crisis provided invaluable experience that the Federal Reserve System can apply in the future should the use of these authorities again become warranted. Going forward, to further strengthen policies for selecting vendors, ensuring the transparency and consistency of decision making involving the implementation of any future emergency programs, and managing risks related to these programs, the Chairman of the Federal Reserve Board should direct Federal Reserve Board and Reserve Bank staff to strengthen procedures in place to guide Reserve Banks' efforts to manage emergency program access for higher-risk borrowers by providing more specific guidance on how Reserve Bank staff should exercise discretion and document decisions to restrict or deny program access for depository institutions and primary dealers that would otherwise be eligible for emergency assistance.

Agency: Federal Reserve System: Board of Governors
Status: Open

Comments: We most recently sought information from the Board of Governors of the Federal Reserve System in July 2018 regarding the status of the recommendation but did not receive any new information. Therefore, the recommendation remains open.

Recommendation: While creating control systems at the same time that the emergency programs were being designed and implemented posed unique challenges, the recent crisis provided invaluable experience that the Federal Reserve System can apply in the future should the use of these authorities again become warranted. Going forward, to further strengthen policies for selecting vendors, ensuring the transparency and consistency of decision making involving the implementation of any future emergency programs, and managing risks related to these programs, the Chairman of the Federal Reserve Board should direct Federal Reserve Board and Reserve Bank staff to document a plan for estimating and tracking losses that could occur under more adverse economic conditions within and across all emergency lending activities and for using this information to inform policy decisions, such as decisions to limit risk exposures through program design or restrictions applied to eligible borrowing institutions.

Agency: Federal Reserve System: Board of Governors
Status: Open

Comments: We most recently sought information from the Board of Governors of the Federal Reserve System in July 2018 regarding the status of the recommendation but did not receive any new information. Therefore, the recommendation remains open.

Recommendation: While creating control systems at the same time that the emergency programs were being designed and implemented posed unique challenges, the recent crisis provided invaluable experience that the Federal Reserve System can apply in the future should the use of these authorities again become warranted. Going forward, to further strengthen policies for selecting vendors, ensuring the transparency and consistency of decision making involving the implementation of any future emergency programs, and managing risks related to these programs, the Chairman of the Federal Reserve Board should direct Federal Reserve Board and Reserve Bank staff to document the Federal Reserve Board's guidance to Reserve Banks on types of emergency program decisions and risk events that require approval by or consultation with the Board of Governors, the Federal Open Market Committee, or other designated groups or officials at the Federal Reserve Board.

Agency: Federal Reserve System: Board of Governors
Status: Open

Comments: We most recently sought information from the Board of Governors of the Federal Reserve System in July 2018 regarding the status of the recommendation but did not receive any new information. Therefore, the recommendation remains open.

Recommendation: The Commissioner of the IRS should direct the appropriate IRS officials to revise the post orders for the service center campuses (SCC) and lockbox bank security guards to include specific procedures for timely reporting exterior lighting outages to SCC or lockbox bank facilities management. These procedures should specify (1) whom to contact to report lighting outages and (2) how to document and track lighting outages until resolved.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. IRS officials stated that during fiscal year 2020, Facilities Management and Security Services (FMSS) will update the Internal Revenue Manual to reflect the necessary guidance for service center guards and FMSS physical security specialists to know (1) whom the guards are to contact to report lighting outages and (2) how lighting outages are to be documented and tracked until resolved.

Recommendation: To provide clarity for which taxpayers with rental real estate activity must report expense payments on information returns and to provide greater information reporting, Congress may wish to consider amending the Internal Revenue Code to make all taxpayers with rental real estate activity subject to the same information reporting requirements as other taxpayers operating a trade or business.

Agency: Congress
Status: Open

Comments: No legislative action had been taken, as of January 2020, to make owners of rental real estate subject to the same payment reporting requirements regardless of whether they engaged in a trade or business under current law, as GAO recommended in August 2008. Changing reporting requirements and holding taxpayers with rental real estate to the same filing requirements as taxpayers whose activities are considered a trade or business would provide clarity about who is required to file, which would improve tax compliance.

Recommendation: As Congress considers whether tax-exempt governmental bonds should be used for professional sports stadiums that are generally privately used, it may also wish to consider whether other facilities, including hotels and golf courses, that are privately used should continue to be financed with tax-exempt governmental bonds.

Agency: Congress
Status: Open

Comments: No legislative action as of March 2020. GAO suggested in February 2008 that as Congress considers whether tax-exempt governmental bonds should be used for professional sports stadiums that are generally privately used, it also should consider whether other privately used facilities, including hotels and golf courses, should continue to be financed with such bonds. Reconsidering the tax-exempt status of certain bonds could generate hundreds of millions of dollars in additional federal revenue.

Recommendation: The Secretary of the Treasury should ensure that the tax gap strategy includes (1) a segment on improving sole proprietor compliance that is coordinated with broader tax gap reduction efforts and (2) specific proposals, such as the options we identified, that constitute an integrated package.

Agency: Department of the Treasury
Status: Open

Comments: As of January 2020, Treasury has taken no action to address this recommendation and has not provided GAO with plans to do so. Treasury's tax gap strategy does not cover sole proprietor compliance in detail while coordinating it with broader tax gap reduction efforts as GAO recommended in July 2007. In March 2016, Treasury officials reported to GAO that they have implemented or proposed several actions to address the tax gap among sole proprietors, such as requiring reporting on payment card payments and improved audit selection procedures for sole proprietors. However, GAO's July 2007 report noted there are many trade offs involved in various options for improving sole proprietor compliance. GAO recommended that Treasury's strategy for reducing the tax gap include a segment on sole proprietor compliance that is coordinated with broader tax gap reduction efforts.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish written policies and procedures to help ensure that major treaty and other international agreement information is properly identified and reported in the CFS. Specifically, these policies and procedures should require that agencies develop a detailed schedule of all major treaties and other international agreements that obligate the U.S. government to provide cash, goods, or services, or that create other financial arrangements that are contingent on the occurrence or nonoccurrence of future events (a starting point for compiling these data could be the State Department's Treaties in Force).

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury developed guidance and formed a working group along with State Department and other federal entity representatives in fiscal year 2019. The working group was established with the Chief Financial Officer Council (CFOC) for the purpose of developing a cost-effective solution to improve the accountability and ensure completeness in the reporting of treaties and other international agreements to address GAO's five long-standing open recommendations. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish written policies and procedures to help ensure that major treaty and other international agreement information is properly identified and reported in the CFS. Specifically, these policies and procedures should require that agencies classify all such scheduled major treaties and other international agreements as commitments or contingencies.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury developed guidance and formed a working group along with State Department and other federal entity representatives in fiscal year 2019. The working group was established with the Chief Financial Officer Council (CFOC) for the purpose of developing a cost-effective solution to improve the accountability and ensure completeness in the reporting of treaties and other international agreements to address GAO's five long-standing open recommendations. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish written policies and procedures to help ensure that major treaty and other international agreement information is properly identified and reported in the CFS. Specifically, these policies and procedures should require that agencies disclose in the notes to the CFS amounts for major treaties and other international agreements that have a reasonably possible chance of resulting in a loss or claim as a contingency.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury developed guidance and formed a working group along with State Department and other federal entity representatives in fiscal year 2019. The working group was established with the Chief Financial Officer Council (CFOC) for the purpose of developing a cost-effective solution to improve the accountability and ensure completeness in the reporting of treaties and other international agreements to address GAO's five long-standing open recommendations. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish written policies and procedures to help ensure that major treaty and other international agreement information is properly identified and reported in the CFS. Specifically, these policies and procedures should require that agencies disclose in the notes to the CFS amounts for major treaties and other international agreements that are classified as commitments and that may require measurable future financial obligations.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury developed guidance and formed a working group along with State Department and other federal entity representatives in fiscal year 2019. The working group was established with the Chief Financial Officer Council (CFOC) for the purpose of developing a cost-effective solution to improve the accountability and ensure completeness in the reporting of treaties and other international agreements to address GAO's five long-standing open recommendations. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB's Office of Federal Financial Management, to establish written policies and procedures to help ensure that major treaty and other international agreement information is properly identified and reported in the CFS. Specifically, these policies and procedures should require that agencies take steps to prevent major treaties and other international agreements that are classified as remote from being recorded or disclosed as probable or reasonably possible in the CFS.

Agency: Department of the Treasury
Status: Open
Priority recommendation

Comments: As of the completion of our fiscal year 2019 audit of the consolidated financial statements of the U.S. government (CFS), this recommendation remained open. Treasury developed guidance and formed a working group along with State Department and other federal entity representatives in fiscal year 2019. The working group was established with the Chief Financial Officer Council (CFOC) for the purpose of developing a cost-effective solution to improve the accountability and ensure completeness in the reporting of treaties and other international agreements to address GAO's five long-standing open recommendations. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2020 CFS audit.

Recommendation: The Senior Civilian Official for the Office of the Assistant Secretary of the Navy should develop a review process so that data call information on sponsor owned material is correctly reported.

Agency: Department of Defense: Department of the Navy: Office of the Assistant Secretary of the Navy (Financial Management): Senior Civilian Official
Status: Open

Comments: According to Navy officials, sponsor owned material is a subset of Operating Materials and Supplies (OM&S) contained within the OM&S-Remainder (OM&S-R) account. The Navy's auditors have reported a material weakness related to the OM&S-R account since fiscal year 2005. Recently, the auditors reported that the Navy did not have adequate policies, procedures, internal controls, and supporting documentation to support the balance and reporting of the OM&S-R account. The Navy currently has efforts underway to address this material weakness with a target completion date of early fiscal year 2021.

Recommendation: The Senior Civilian Official for the Office of the Assistant Secretary of the Navy should revise the Navy's policies for compiling its financial statements so that they are in accordance with federal accounting standards and the DOD Financial Management Regulation. Specifically: (1) ammunition items needing repair and those categorized as excess, obsolete, and unserviceable should be revalued appropriately to comply with SFFAS No. 3 and the DOD Financial Management Regulation; and (2) shipboard inventories aboard smaller combatant ships should be reported as operating materials and supplies in accordance with federal accounting standards.

Agency: Department of Defense: Department of the Navy: Office of the Assistant Secretary of the Navy (Financial Management): Senior Civilian Official
Status: Open

Comments: Regarding the first part of this recommendation, the Navy reports its ordnance within the Operating Materials and Supplies-Ordinance (OM&S-O) account and acknowledged in its most recent agency financial report (AFR) that valuation adjustments pertaining to repair cost are not currently calculated for ordnance. Also, the Navy's auditors have reported a material weakness related to the OM&S-O account since fiscal year 2005. Recently, the auditors reported that the Navy did not have adequate policies, procedures, and internal controls to effectively implement accounting standards related to its OM&S-O account. The Navy currently has efforts underway intended to address this material weakness with a target correction date of late fiscal year 2021. Regarding the second part of this recommendation, SFFAS 3 states that OM&S should be accounted for using the consumption method; in that materials are to be reported as an asset until they are issued to an end user for consumption in normal operations, at which point they would be expensed. Navy acknowledges, in its fiscal year 2019 AFR, that due to system limitations operating expenses are not always recognized when the items are consumed. The Navy also stated that efforts are underway to transition to the consumption method to properly recognize expenses; however, no target completion date was provided.