Recommendation: The Secretary of Energy should lead the development of a mechanism for interagency collaboration to determine roles and responsibilities for addressing priorities related to research on the health effects of low-dose radiation.

Agency: Department of Energy
Status: Open

Comments: In a July 2018 update, DOE stated that it believes that the White House Office of Science and Technology Policy's (OSTP) National Science and Technology Council (NSTC) is the appropriate entity to lead interagency collaboration and coordinate science and technology policy. According to DOE, OSTP intends to charter an interagency working group under the NSTC on a government-wide strategy related to research on the health effects of low-dose radiation. As of December 2019, OSTP had begun to address a related requirement under the American Innovation and Competitiveness Act to coordinate federal efforts related to radiation biology research and planned to release a report on this topic in early 2020. When we confirm what actions OSTP has taken to establish this working group, we will provide updated information.

Recommendation: To improve agency information security programs, Acting Director of the Office of Personnel Management should provide and track specialized training for all individuals, including contractors, who have significant security responsibilities.

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM partially agreed with this recommendation. In December 2018, OPM stated that it is working with its learning management system vendor to develop requirements, but had not yet targeted an expected completion date. To fully implement the recommendation, OPM needs to complete its efforts to ensure that it provides and tracks training for individuals with significant security responsibilities. As of March 2020, OPM has not provided evidence that it has completed these actions.

Recommendation: To improve agency information security programs, the Secretary of the Department of Veterans should conduct security control assessments for the two selected systems and ensure the procedures comprehensively test technical controls.

Agency: Department of Veterans Affairs
Status: Open

Comments: VA concurred with our recommendation. The agency has conducted security control assessments for the two systems, but these assessments did not show that technical controls were comprehensively tested. According to VA, the agency will complete the next security control assessment in October 2019 and complete the system assessment report in December 2019. As of March 2020, the agency has not provided evidence that it has implemented this recommendation. Subsequent to VA informing us that it has completed implementation, we plan to verify the agency's actions.

Recommendation: To improve security over federal systems, including those considered to be high impact, the Director of the Office of Management and Budget should issue plan and practices specified in the Cybersecurity Strategy and Implementation Plan.

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: OMB concurred with our recommendation. On December 9, 2016, OMB issued memorandum M-17-09, Management of Federal High Value Assets, which lists some existing policies and guidance and other actions that agencies need to take to protect IT assets. Further information is needed to validate implementation of the recommendation. As of March 2020, the agency has not provided evidence that it has implemented this recommendation. Subsequent to OMB informing us that it has completed implementation, we plan to verify the agency's actions.

Recommendation: To improve the reliability of its cost estimates, as NRC revises its cost estimating procedures, the NRC Chairman should ensure that the agency aligns the procedures with relevant cost estimating best practices identified in the GAO Cost Estimating and Assessment Guide and ensure that future cost estimates are prepared in accordance with relevant cost estimating best practices.

Agency: Nuclear Regulatory Commission
Status: Open
Priority recommendation

Comments: In August 2019, NRC staff reported that the Commission had directed them to revise the guidance and resubmit it to the Commission by January 2020. In February 2020, the NRC staff submitted the revised guidance to the Commission. NRC staff said that following Commission review and approval, they will publish the guidance. We will review the cost-benefit guidance when it is released and determine if it responds to this recommendation.

Recommendation: To achieve greater efficiency and effectiveness, Congress should consider transferring the oversight of the markings of toy and imitation firearms in 15 U.S.C. 5001 from the National Institute of Standards and Technology (within the Department of Commerce) to the Consumer Product Safety Commission.

Agency: Congress
Status: Open

Comments: This matter is an action identified in GAO's annual Duplication and Cost Savings reports. No legislative action identified. The Gun Look-Alike Case Act, H.R. 3224, which was introduced on July 27, 2015, in the 114th Congress, would transfer the authority to regulate the markings of toy, look-alike, and imitation firearms in section 5001 of title 15 of the U.S. Code from NIST to CPSC, as GAO suggested in November 2014. This bill was referred to the Subcommittee on Commerce, Manufacturing, and Trade of the Committee on Energy and Commerce in the United States House of Representatives, and did not pass out of committee. This bill was not reintroduced in the 115th Congress and, as of March 2020, has not been reintroduced by the 116th Congress. Continued regulation of the marking of toy and imitation firearms by NIST rather than CPSC does not leverage each agency's expertise and therefore may not be the most efficient use of scarce federal resources.

Recommendation: To improve existing coordination of oversight for consumer product safety, Congress should consider establishing a formal comprehensive oversight mechanism for consumer product safety agencies to address crosscutting issues as well as inefficiencies related to fragmentation and overlap such as communication and coordination challenges and jurisdictional questions between agencies. Different types of formal mechanisms could include, for example, creating a memorandum of understanding to formalize relationships and agreements or establishing a task force or interagency work group. As a starting point, Congress may wish to obtain agency input on options for establishing more formal coordination.

Agency: Congress
Status: Open

Comments: This matter is an action identified in GAO's annual Duplication and Cost Savings reports. As of March 2020, no legislation was identified that would establish a collaborative mechanism to facilitate communication across the relevant agencies and to help enable them to collectively address crosscutting issues, as GAO suggested in November 2014. Some of the agencies with direct regulatory oversight responsibilities for consumer product safety reported that they continue to collaborate to address specific consumer product safety topics. However, without a formal comprehensive oversight mechanism, the agencies risk missing opportunities to better leverage resources and address challenges, including those related to fragmentation and overlap.

Recommendation: To develop an estimate of the scope of work remaining to address uranium contamination on or near the Navajo reservation, Congress should consider requiring that the Environmental Protection Agency take the lead and work with the other federal agencies to develop an overall estimate of the remaining scope of the work, time frames, and costs.

Agency: Congress
Status: Open

Comments: As of September 2020, we are not aware of any legislation being enacted to address this matter for congressional consideration.

Recommendation: In light of the problems BIA has encountered in managing the cleanup at the Tuba City Dump site, the Secretary of the Interior should direct the Assistant Secretary for Indian Affairs to employ best practices in creating the schedule and cost estimates for the remedial action cleanup phase.

Agency: Department of the Interior
Status: Open

Comments: As of September 2020, BIA and EPA had selected a cleanup option for Tuba City Dump, but BIA had not created schedule or cost estimates for the cleanup action. BIA stated it anticipated completing the cleanup design, which will include cost and schedule estimates, by September 2022. GAO will assess BIA's actions once they are complete.

Recommendation: In light of the problems BIA has encountered in managing the cleanup at the Tuba City Dump site, the Secretary of the Interior should direct the Assistant Secretary for Indian Affairs to identify and examine any lessons learned from managing the remedial investigation and feasibility study contract and consider these lessons as part of the acquisition planning process for the remedial action contract.

Agency: Department of the Interior
Status: Open

Comments: As of September 2020, BIA and EPA had selected a cleanup option for Tuba City Dump, but BIA had not initiated the acquisition planning process for the future cleanup contract. BIA stated it anticipated completing the cleanup design work, including the acquisition package, by September 2022. GAO will assess BIA's actions once they are complete.

Recommendation: To address the current information gap in Regulation SHO for prime brokerage arrangements and mitigate the impact of any unintended consequences caused by SEC rules, as well as ensure consistent implementation of SEC rules by the industry, the Chairman of the Securities and Exchange Commission should finalize, in an expedited manner upon finalization of the temporary rule, the revised 1994 Prime Broker Letter.

Agency: United States Securities and Exchange Commission
Status: Open

Comments: As of June 4, 2019, the revised Prime Broker letter has not been finalized. Staff from the Reg SHO team in SEC's Trading and Markets division stated that they have regularly and continuously asked the industry for comments on the Prime Broker Letter without receiving any real progress. Their most recent request for comments was emailed to industry counsel on May 22, 2019. Industry counsel acknowledged the request but have yet to provide comments.