Recommendation: The Secretary of the Army should ensure that Army Materiel Command establishes measures for its depots to track facility or equipment conditions that lead to maintenance delays. (Recommendation 1)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Army should ensure that Army Materiel Command implements tracking of the measures for identifying when facility or equipment conditions lead to maintenance delays at each Army depot. (Recommendation 2)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Navy should ensure that Naval Sea Systems Command and the Commander, Fleet Readiness Centers establish measures for their depots to track facility or equipment conditions that lead to maintenance delays. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Navy should ensure that Naval Sea Systems Command and the Commander, Fleet Readiness Centers implement tracking of the measures for identifying when facility or equipment conditions lead to maintenance delays at each Navy depot. (Recommendation 4)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Air Force should ensure that Air Force Materiel Command establishes measures for its depots to track facility or equipment conditions that lead to maintenance delays. (Recommendation 5)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Air Force should ensure that Air Force Materiel Command implements tracking of the measures for identifying when facility or equipment conditions lead to maintenance delays at each Air Force depot. (Recommendation 6)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commandant of the Marine Corps should ensure that Marine Corps Logistics Command establishes measures for its depots to track facility or equipment conditions that lead to maintenance delays. (Recommendation 7)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commandant of the Marine Corps should ensure that Marine Corps Logistics Command implements tracking of the measures for identifying when facility or equipment conditions lead to maintenance delays at each Marine Corp depot. (Recommendation 8)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Army should ensure that Army Materiel Command incorporates in its depot optimization plan, key results-oriented elements including analytically-based goals, results-oriented metrics, identification of required resources, risks, and stakeholders, and regular reporting to decision makers on progress. (Recommendation 9)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Navy should ensure that Commander, Fleet Readiness Centers incorporates in its depot optimization plan, key results-oriented elements including analytically-based goals, results-oriented metrics, identification of required resources, risks, and stakeholders, and regular reporting to decision makers on progress. (Recommendation 10)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Air Force should ensure that Air Force Materiel Command incorporates in its depot optimization plan, key results-oriented elements including analytically-based goals, results-oriented metrics, identification of required resources, risks, and stakeholders, and regular reporting to decision makers on progress. (Recommendation 11)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commandant of the Marine Corps should ensure that Marine Corps Logistics Command incorporates in its depot optimization plan, key results-oriented elements including analytically-based goals, results-oriented metrics, identification of required resources, risks, and stakeholders, and regular reporting to decision makers on progress. (Recommendation 12)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should ensure that the Assistant Secretary of Defense for Sustainment develops an approach for managing service depot investments that includes management monitoring and regular reporting to decision makers and Congress on progress. (Recommendation 13)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the VA should direct the Undersecretary for Health to designate a focal point for overseeing VAMCs' pharmacy inventory management system-wide and define the focal point's responsibilities. (Recommendation 1)

Agency: Department of Veterans Affairs
Status: Open

Comments: VA officials provided documentation showing approval as of September 2019 for the procurement of a perpetual inventory management system that would allow VA medical facilities to keep track of inventory for all prescription drugs and assist VA with system-wide oversight. As of January 2020, this contract has yet to be awarded. In January 2020, VA officials also stated that Pharmacy Benefits Management (PBM) Services has been designated as the focal point for overseeing VA medical facilities' inventory management system-wide. VA officials stated that PBM is responsible for developing VA medical facility inventory management policy; however, VA did not provide documentation on PBM's defined responsibilities for system-wide oversight in the absence of an inventory system and once the system is procured. We plan to keep this recommendation open until we receive documentation of PBM's defined responsibilities for overseeing VAMC's pharmacy inventory management system-wide.

Recommendation: To minimize unnecessary overlap and duplication and more efficiently use DOD's U.S. distribution centers, the Secretary of Defense should direct the Under Secretary of Defense for Acquisition, Technology, and Logistics (or the subsequent Under Secretary for Acquisition and Sustainment), in conjunction with the Director of DLA, and the Secretaries of the Army, the Air Force, and the Navy, to assess and direct the implementation of actions, as appropriate, that can be taken using existing authorities to close, realign, or dispose of existing infrastructure.

Agency: Department of Defense
Status: Open

Comments: DOD concurred with the recommendation. DOD began reviewing its secondary item inventory warehousing in July 2017 to consolidate underused distribution centers. In February 2018, DOD officials stated that the department will conduct three site studies by fiscal year 2019 to assess the viability and any potential savings from consolidation at these locations. In April 2019, DOD officials stated that the site studies had been completed and they anticipate a final report in late May 2019.

Recommendation: To provide clinicians and pharmacists with improved tools to support pharmacy services to veterans and reduce risks to patient safety, the Secretary of Veterans Affairs should direct the Assistant Secretary for Information and Technology and the Under Secretary for Health to establish and implement a plan for updating the pharmacy system to address the inefficiencies with viewing patient medication data in the Outpatient Pharmacy application and between the pharmacy application and viewers.

Agency: Department of Veterans Affairs
Status: Open

Comments: VA concurred with our recommendation and in August 2017 stated that it had identified $4 million in fiscal year 2018 to establish a pharmacy graphical user interface. As of September 2020, VA was still in the process of implementing the pharmacy graphical user interface, which it estimated it would deploy in December 2020. We will continue to monitor the situation.

Recommendation: To provide clinicians and pharmacists with improved tools to support pharmacy services to veterans and reduce risks to patient safety, the Secretary of Veterans Affairs should direct the Assistant Secretary for Information and Technology and the Under Secretary for Health to complete a plan for the implementation of an approach to data standardization that will support the capability for clinicians and pharmacists to view complete DOD data and receive order checks that consistently include DOD data.

Agency: Department of Veterans Affairs
Status: Open

Comments: VA concurred in principle with our recommendation and in May 2018 awarded a contract to implement the same electronic health record system that is being deployed by DOD, which is intended to present VA clinicians with complete DOD data and the ability to perform order checks on DOD data. In parallel, the department is continuing and expanding the implementation of data standardization. According to the department's September 2020 update, the agency had updated its pharmacy system to improve data standardization. However, the agency had not submitted sufficient documentation to close the recommendation. We will continue to monitor the situation.

Recommendation: To provide clinicians and pharmacists with improved tools to support pharmacy services to veterans and reduce risks to patient safety, the Secretary of Veterans Affairs should direct the Assistant Secretary for Information and Technology and the Under Secretary for Health to conduct an assessment to determine to what extent interoperability of VA's pharmacy system with DOD's pharmacy system is impacting transitioning service members.

Agency: Department of Veterans Affairs
Status: Open

Comments: VA concurred with our recommendation and in May 2017 stated that the health executive committee would complete an assessment to determine the extent interoperability with DOD's pharmacy system is impacting transitioning service members. In October 2017, VA conducted an assessment, however it was limited to one part of its system, the Joint Legacy Viewer (JLV), and read-only data. In September 2020, the agency provided a written response to supplement its October 2017 assessment with additional data regarding the potential impact of failures of its system to exchange pharmacy and allergy data with DOD. However, VA had not submitted sufficient documentation to close the recommendation. We will continue to monitor the situation.

Recommendation: To provide clinicians and pharmacists with improved tools to support pharmacy services to veterans and reduce risks to patient safety, the Secretary of Veterans Affairs should direct the Assistant Secretary for Information and Technology and the Under Secretary for Health to develop and execute a plan for implementing the capability to send outbound e-prescriptions to non-VA pharmacies, in accordance with National Council for Prescription Drug Programs standards.

Agency: Department of Veterans Affairs
Status: Open

Comments: VA concurred with our recommendation and in August 2017 stated that it will review its plan for e-prescribing functionality after it has signed a contract to adopt the electronic health record system that is being deployed by DOD. Although VA awarded the contract for the new electronic health record system in May 2018, VA had not submitted sufficient documentation to close the recommendation as of September 2020. We will continue to monitor the situation.

Recommendation: To provide clinicians and pharmacists with improved tools to support pharmacy services to veterans and reduce risks to patient safety, the Secretary of Veterans Affairs should direct the Assistant Secretary for Information and Technology and the Under Secretary for Health to ensure that the department's evaluation of alternatives for electronic health records includes consideration for additional generation level 3 capability such as navigating from an alert to medication order in the electronic health record system.

Agency: Department of Veterans Affairs
Status: Open

Comments: VA concurred with our recommendation and in August 2017 stated that it had entered into contract negotiations to acquire and deploy a level 3 electronic health record system that is expected to address pharmacy functions. As of September 2020, the agency had not submitted sufficient documentation to close the recommendation. We will update the status of this recommendation when VA provides documentation of its evaluation of alternatives to us.

Recommendation: To provide clinicians and pharmacists with improved tools to support pharmacy services to veterans and reduce risks to patient safety, the Secretary of Veterans Affairs should direct the Assistant Secretary for Information and Technology and the Under Secretary for Health to reassess the priority for establishing an inventory management capability to monitor and update medication levels and track when to reorder medications.

Agency: Department of Veterans Affairs
Status: Open

Comments: VA concurred with our recommendation and in August 2017 stated that it will reassess the prioritization of medication inventory management after a contract for adoption of the electronic health record system is signed. As of September 2020, VA had not submitted sufficient documentation to close the recommendation. We will continue to monitor the situation.

Recommendation: To improve federal agencies' efforts to rationalize their portfolio of applications, the heads of the Departments of Agriculture, Commerce, Education, Energy, Health and Human Services, Housing and Urban Development, the Interior, Labor, State, Transportation, the Treasury, and Veterans Affairs; and heads of the Environmental Protection Agency; National Aeronautics and Space Administration; National Science Foundation; Nuclear Regulatory Commission; Office of Personnel Management; Small Business Administration; Social Security Administration; and U.S. Agency for International Development should direct their Chief Information Officers (CIOs) and other responsible officials to improve their inventories by taking steps to fully address the practices we identified as being partially met or not met.

Agency: Department of Commerce
Status: Open

Comments: We reported that the Department of Commerce did not meet the following software application inventory practice: regularly updates the inventory with quality controls to ensure reliability. Specifically, the department did not provide evidence of a process to regularly update its inventory or quality controls to ensure the reliability of the data collected. In October 2017, the department reported that application inventory information will be captured through the Department of Commerce Capital Planning and Investment Control (CPIC) system, as part of its regular updating of investment information. Further, the department stated that it will update its CPIC handbook to provide guidance on quality control to ensure reliability of the data collected. In November 2018 and November 2019 we followed-up with Commerce on the status of their efforts; however, as of January 2020, we had not received an update. We plan to continue to follow up with Commerce to monitor the status of these planned actions.

Recommendation: To improve federal agencies' efforts to rationalize their portfolio of applications, the heads of the Departments of Agriculture, Commerce, Education, Energy, Health and Human Services, Housing and Urban Development, the Interior, Labor, State, Transportation, the Treasury, and Veterans Affairs; and heads of the Environmental Protection Agency; National Aeronautics and Space Administration; National Science Foundation; Nuclear Regulatory Commission; Office of Personnel Management; Small Business Administration; Social Security Administration; and U.S. Agency for International Development should direct their Chief Information Officers (CIOs) and other responsible officials to improve their inventories by taking steps to fully address the practices we identified as being partially met or not met.

Agency: Department of Energy
Status: Open

Comments: We reported that the Department of Energy partially met the following three software application inventory practices, (1) includes systems from all organizational components, (2) specifies basic application attributes, and (3) is regularly updated with quality controls to ensure reliability. In May 2017, the department reported that it plans to implement automated monitoring and inventory tools by the end of fiscal year 2020, which it expects will address the key practices. In December 2019, the department reported that it anticipates completing a refresh of its application inventory by the end of February 2020. We plan to monitor the department's efforts to implement the tools and to develop a complete application inventory.

Recommendation: To improve federal agencies' efforts to rationalize their portfolio of applications, the heads of the Departments of Agriculture, Commerce, Education, Energy, Health and Human Services, Housing and Urban Development, the Interior, Labor, State, Transportation, the Treasury, and Veterans Affairs; and heads of the Environmental Protection Agency; National Aeronautics and Space Administration; National Science Foundation; Nuclear Regulatory Commission; Office of Personnel Management; Small Business Administration; Social Security Administration; and U.S. Agency for International Development should direct their Chief Information Officers (CIOs) and other responsible officials to improve their inventories by taking steps to fully address the practices we identified as being partially met or not met.

Agency: Department of Housing and Urban Development
Status: Open

Comments: We reported that the Department of Housing and Urban Development (HUD) partially met the following three software application inventory practices, (1) includes systems from all organizational components, (2) specifies basic application attributes, and (3) is regularly updated with quality controls to ensure reliability. In June 2017, the department reported that it is working to identify applications in field offices, and planned for this effort to be completed in fiscal year 2018. In addition, the department stated it planned to update the inventory to include business functions for each system by the end of fiscal year 2017. Further, department officials stated that to ensure the accuracy and reliability of the application inventory, the department planned to conduct quarterly portfolio reviews starting in fiscal year 2018. In October 2018, HUD officials reported that CTO performed a technical assessment of HUD's IT assets, which resulted in identifying systems in the inventory that had been decommissioned and will be decommissioned. In addition, the department provided its strategy for performing the assessment. In August 2019, HUD reported that it completed an assessment of its legacy applications and the current inventory system is outdated. However, as of January 2020, HUD had not yet provided an updated inventory. We plan to continue to monitor the department's efforts to address the recommendation.

Recommendation: To improve federal agencies' efforts to rationalize their portfolio of applications, the heads of the Departments of Agriculture, Commerce, Education, Energy, Health and Human Services, Housing and Urban Development, the Interior, Labor, State, Transportation, the Treasury, and Veterans Affairs; and heads of the Environmental Protection Agency; National Aeronautics and Space Administration; National Science Foundation; Nuclear Regulatory Commission; Office of Personnel Management; Small Business Administration; Social Security Administration; and U.S. Agency for International Development should direct their Chief Information Officers (CIOs) and other responsible officials to improve their inventories by taking steps to fully address the practices we identified as being partially met or not met.

Agency: Social Security Administration
Status: Open

Comments: We reported that the Social Security Administration (SSA) partially met the following two software application inventory practices, (1) includes systems from all organizational components, and (2) regularly updates the inventory with quality controls to ensure reliability. In March 2017, SSA officials reported that the agency's Office of Systems and Office of Operations continue to collaborate on integrating application information into the Enterprise Application Inventory. The officials reported that regionally developed applications that have been granted authority to operate have been imported into the enterprise application inventory. In addition, the officials stated that the Office of Operations was in the process of redesigning their repository to accommodate requirements to support the Enterprise Application Inventory, including the ability to update and maintain application information in the enterprise repository. Lastly, SSA officials reported that its Office of Information Security and Office of Systems were continuing to work to identify additional headquarters applications and develop process and automation to include applications in the inventory. In June 2019, SSA officials reported that they were continuing to make progress to update the inventory to include systems from all organizational components. However, as of January 2020, we had not received an updated inventory. We will continue to monitor SSA's efforts to develop a complete application inventory.

Recommendation: To improve federal agencies' efforts to rationalize their portfolio of applications, the heads of the Departments of Agriculture, Commerce, Education, Energy, Health and Human Services, Housing and Urban Development, the Interior, Labor, State, Transportation, the Treasury, and Veterans Affairs; and heads of the Environmental Protection Agency; National Aeronautics and Space Administration; National Science Foundation; Nuclear Regulatory Commission; Office of Personnel Management; Small Business Administration; Social Security Administration; and U.S. Agency for International Development should direct their Chief Information Officers (CIOs) and other responsible officials to improve their inventories by taking steps to fully address the practices we identified as being partially met or not met.

Agency: Department of Labor
Status: Open

Comments: We reported that the Department of Labor did not meet one software application inventory practice, and partially met three practices. Specifically, we reported that the department did not meet the practice to ensure that the inventory is regularly updated with quality controls to ensure reliability, and partially met the practices to (1) include business and enterprise IT systems, (2) include systems from all organizational components, and (3) specify basic application attributes. In March 2018, department officials provided an updated inventory, which included business and enterprise IT systems from all organizational components, and specified basic attributes, including the name, owner, and business function. In addition, officials stated that they plan to update the inventory on a periodic basis as necessary, at minimum annually, as part of the department's IT budgeting process. Further, in June 2019, officials reported that the department performs biannual reviews of all IT investments and associated systems and applications to verify reported data. The officials also reported that the department uses quality control processes and procedures to ensure consistent, standard, and complete reporting to align with all investment artifacts. However, the department did not provide evidence of these data quality efforts. In June 2019, officials also reported that the department is implementing a new system in order to maintain an ongoing comprehensive inventory of all IT assets, including applications, which it expects to have fully operational by the end of the second quarter of fiscal year 2020. We will continue to monitor the department's efforts.

Recommendation: To improve federal agencies' efforts to rationalize their portfolio of applications, the heads of the Departments of Agriculture, Commerce, Education, Energy, Health and Human Services, Housing and Urban Development, the Interior, Labor, State, Transportation, the Treasury, and Veterans Affairs; and heads of the Environmental Protection Agency; National Aeronautics and Space Administration; National Science Foundation; Nuclear Regulatory Commission; Office of Personnel Management; Small Business Administration; Social Security Administration; and U.S. Agency for International Development should direct their Chief Information Officers (CIOs) and other responsible officials to improve their inventories by taking steps to fully address the practices we identified as being partially met or not met.

Agency: Department of the Treasury
Status: Open

Comments: We reported that the Department of the Treasury had partially met the following two practices for establishing a complete software application inventory, (1) specifies basic application attributes, and (2) is regularly updated with quality controls to ensure reliability. In September 2017, the department provided evidence showing that it had taken steps to address these practices. Specifically, the department provided an export of its inventory, which showed that most of the systems listed contained a system description. According to department officials, some systems do not have a system description because the department's inventory policy allows bureaus to attach documents to the inventory, which include the system description, instead of populating the system description field. Further, the policy does not require a system description for systems in the disposal state. Moreover, the inventory did not include the business segment or function that the system supports. According to Treasury officials, the Bureau and Functional Unit fields within the inventory allow the department to map the systems to the business segments that they support. We followed up with the department to obtain this mapping. However, as of January 2020, the department had not provided it. We will continue to monitor the department's efforts to ensure that the inventory is regularly updated with quality controls to ensure its reliability.

Recommendation: To improve federal agencies' efforts to rationalize their portfolio of applications, the heads of the Departments of Agriculture, Commerce, Education, Energy, Health and Human Services, Housing and Urban Development, the Interior, Labor, State, Transportation, the Treasury, and Veterans Affairs; and heads of the Environmental Protection Agency; National Aeronautics and Space Administration; National Science Foundation; Nuclear Regulatory Commission; Office of Personnel Management; Small Business Administration; Social Security Administration; and U.S. Agency for International Development should direct their Chief Information Officers (CIOs) and other responsible officials to improve their inventories by taking steps to fully address the practices we identified as being partially met or not met.

Agency: Department of State
Status: Open

Comments: We reported that the Department of State partially met the following software application inventory practices: (1) specifies basic application attributes; and (2) is regularly updated with quality controls to ensure reliability. Specifically, we reported that while the inventory included basic application attributes (e.g. name, description), it did not include the business function for the majority of inventory entries. Further, we reported that the agency did not provide evidence that quality control processes were in place to ensure the reliability of the data in the inventory. In July 2017, department officials stated that the department recently began a department-wide data call to obtain information on all IT assets and applications from each bureau, including aligning the assets and applications to a business function. Further, officials stated that they plan to analyze the results against their current data to ensure the accuracy and reliability of the IT asset inventory. In June 2019, the department provided evidence demonstrating that its inventory includes the business function for IT assets. In addition, State officials stated that the IT asset inventory that is posted internally for review is a high-level summary to facilitate monthly validation. However, as of January 2020, the department has not provided documentation showing that it has implemented the quality control processes to ensure the reliability of the data. We plan to continue to monitor the department's efforts to address the recommendation.

Recommendation: To improve federal agencies' efforts to rationalize their portfolio of applications, the heads of the Departments of Agriculture, Commerce, Education, Energy, Health and Human Services, Housing and Urban Development, the Interior, Labor, State, Transportation, the Treasury, and Veterans Affairs; and heads of the Environmental Protection Agency; National Aeronautics and Space Administration; National Science Foundation; Nuclear Regulatory Commission; Office of Personnel Management; Small Business Administration; Social Security Administration; and U.S. Agency for International Development should direct their Chief Information Officers (CIOs) and other responsible officials to improve their inventories by taking steps to fully address the practices we identified as being partially met or not met.

Agency: Environmental Protection Agency
Status: Open

Comments: We reported that the Environmental Protection Agency had fully met three of the four practices to establish a complete application inventory, and partially met one. Specifically, the agency partially met the practice for including application attributes in the inventory, as although EPA did not identify the business function for every application. In December 2019, Environmental Protection Agency officials stated that the inventory now requires the business function to be included, and provided inventory update instructions that show the business function is to be included. In addition, agency officials provided instructions for senior information managers to update the inventory in fiscal year 2019. However, as of January 2020, agency officials had not provided an updated inventory, and thus we were not able to verify that the business function was added for all applications. We will follow up with the agency to obtain the updated inventory.

Recommendation: To improve federal agencies' efforts to rationalize their portfolio of applications, the heads of the Departments of Agriculture, Commerce, Education, Energy, Health and Human Services, Housing and Urban Development, the Interior, Labor, State, Transportation, the Treasury, and Veterans Affairs; and heads of the Environmental Protection Agency; National Aeronautics and Space Administration; National Science Foundation; Nuclear Regulatory Commission; Office of Personnel Management; Small Business Administration; Social Security Administration; and U.S. Agency for International Development should direct their Chief Information Officers (CIOs) and other responsible officials to improve their inventories by taking steps to fully address the practices we identified as being partially met or not met.

Agency: Office of Personnel Management
Status: Open

Comments: We reported that the Office of Personnel Management (OPM) partially met the software application inventory practice to regularly update the inventory with quality controls to ensure reliability. In November 2016, OPM officials stated that they were validating the data in the application inventory. In addition, officials stated that they were making progress in using automated scanning tools to update the inventory, including coordinating with the General Services Administration's Software Management Group which is working to standardize the use of automated inventory tools across the government. In June 2017, November 2018, and November 2019, we followed up with OPM to obtain documentation of these reported actions; however, as of January 2020, the agency had not yet provided supporting documentation. We are continuing to follow up with OPM to obtain documentation of its reported actions.

Recommendation: To improve federal agencies' efforts to rationalize their portfolio of applications, the Secretaries of Defense, Homeland Security, the Interior, and Labor; and the Director of the National Science Foundation should direct the CIOs and other responsible officials to modify existing investment management processes to address applications more completely. Specifically, the Secretary of Defense should direct the responsible official to modify the department's existing processes to collect and review cost, technical, and business information for the enterprise and business IT systems within the Enterprise Information Environment Mission Area applications which are currently not reviewed as part of the department's process for business systems.

Agency: Department of Defense
Status: Open

Comments: The Department of Defense did not concur with our recommendation, noting, among other things, in its written response to our draft report, that a majority of the Enterprise Information Environment Mission Area systems are IT infrastructure, and not applications. However, we reported that the mission area nevertheless included a large number of enterprise and business IT applications which could benefit from rationalization, and we therefore believed our recommendation was still warranted. In March 2020, the department stated that it is formalizing a guide to assist components with implementing an application rationalization process, that will be used to rationalize the Enterprise Information Environment Mission Area systems. The department stated that it plans to perform annual reviews, and expects to start by the end of fiscal year 2020.

Recommendation: To improve federal agencies' efforts to rationalize their portfolio of applications, the Secretaries of Defense, Homeland Security, the Interior, and Labor; and the Director of the National Science Foundation should direct the CIOs and other responsible officials to modify existing investment management processes to address applications more completely. Specifically, the Secretary of Homeland Security should direct the department's CIO to identify one high-cost function it could collect detailed cost, technical, and business information for and modify existing processes to collect and review this information.

Agency: Department of Homeland Security
Status: Open

Comments: In April 2018, DHS officials stated that they identified FOIA systems as a high cost function, and will modify existing processes to collect and review the cost, technical, and business information. In November 2019, DHS reported that it is continuing to make progress in acquiring a new enterprise-wide FOIA system by reviewing current capabilities. We plan to continue to monitor the department's efforts.

Recommendation: To improve federal agencies' efforts to rationalize their portfolio of applications, the Secretaries of Defense, Homeland Security, the Interior, and Labor; and the Director of the National Science Foundation should direct the CIOs and other responsible officials to modify existing investment management processes to address applications more completely. Specifically, the Secretary of Labor should direct the department's CIO to consider a segmented approach to further rationalize and identify a function for which it would modify existing processes to collect and review application-specific cost, technical, and business value information.

Agency: Department of Labor
Status: Open

Comments: In February 2017, department officials stated that the department's portfolio of IT investments, which includes the systems, sub-systems, and applications in the IT asset inventory, are rationalized bi-annually as part of the Office of the Chief Information Officer's IT Capital Planning and Investment Control (CPIC) review processes. Further, officials stated that the systems and applications were also being rationalized as part of the process for updating the IT asset inventory. Officials stated that the department plans to review and update the department's CPIC guide to describe the IT asset inventory management process including the basic quality controls. In July 2019, officials reported that the department plans to have the updated guide completed by the end of fiscal year 2019. However, as of January 2020, the department had not provided documentation supporting these efforts. We plan to follow-up with the department to obtain documentation of its efforts to address the recommendation.

Recommendation: To increase department-wide supply chain efficiencies and effectiveness in support of maintenance at the Army and Marine Corps depots and Navy shipyards, the Secretary of Defense should direct the Assistant Secretary of Defense for Logistics and Materiel Readiness, in conjunction with the Director, Defense Logistics Agency, and the Secretaries of the Army and Navy and the Commandant of the Marine Corps to assess through a comprehensive business case analysis-drawing on lessons learned from previous efforts-the costs and benefits of DLA managing the retail supply, storage, and distribution functions at the Army and Marine Corps depots and Navy shipyards.

Agency: Department of Defense
Status: Open

Comments: DOD concurred with our recommendation. As of August 2018, DOD had designated the transfer of these retail functions as an operating priority and identified it as a key reform effort within logistics in the department. The Marine Corps has conducted its analysis and decided to transition additional supply, storage, and distribution functions to the Defense Logistics Agency (DLA) over a 4-year period, with all implementation activities scheduled to be complete by 2022. The Army continues to analyze requirements for the full transition of supply, storage, and distribution functions to DLA with final decisions to be made in late 2018. Lastly, the Navy and DLA are working on a strategic memorandum of understanding to guide decision on the role of DLA at the Navy shipyards, according to a senior DOD official. Without the Army and Navy finalizing its business case analyses, decision makers will not be positioned to make cost-effective decisions regarding supply operations at military depots.

Recommendation: To increase department-wide supply chain efficiencies and effectiveness in support of maintenance at the Army and Marine Corps depots and Navy shipyards, the Secretary of Defense should direct the Assistant Secretary of Defense for Logistics and Materiel Readiness, in conjunction with the Director, Defense Logistics Agency, and the Secretaries of the Army and Navy and the Commandant of the Marine Corps to use the analysis to make a decision on the degree to which DLA should manage these functions at the Army and Marine Corps depots and Navy shipyards.

Agency: Department of Defense
Status: Open

Comments: DOD concurred with our recommendation. As of August 2018, DOD had designated the transfer of these retail functions as an operating priority and identified it as a key reform effort within logistics in the department. The Marine Corps has conducted its analysis and decided to transition additional supply, storage, and distribution functions to the Defense Logistics Agency (DLA) over a 4-year period, with all implementation activities scheduled to be completed by 2022. However, the Army and Navy have not made any decisions regarding the additional transfer of supply, storage and distribution functions to DLA. Without the Army and Navy making decisions based on business case analyses on the degree to which additional supply, storage, and distribution functions will transfer to DLA, DOD will not be ensured that it is operating its supply operations at military depots in a cost-effective manner.

Recommendation: To improve the efficiency and effectiveness of supply and maintenance operations, in accordance with DOD guidance, the Secretary of Defense should direct the Assistant Secretary of Defense for Logistics and Materiel Readiness, in conjunction with the Director, Defense Logistics Agency, and the Secretaries of the Army, Navy, and Air Force and the Commandant of the Marine Corps to develop and implement metrics that measure the accuracy of planning factors, such as the schedule, bill of materials, and replacement factors, used for depot maintenance.

Agency: Department of Defense
Status: Open

Comments: DOD concurred with our recommendation. As of August 2018, DOD has begun to identify metrics that measure the accuracy of planning factors used for depot maintenance. However, these metrics are not scheduled to be implemented fully implemented in December 2018.

Recommendation: To improve the efficiency and effectiveness of supply and maintenance operations, in accordance with DOD guidance, the Secretary of Defense should direct the Assistant Secretary of Defense for Logistics and Materiel Readiness, in conjunction with the Director, Defense Logistics Agency, and the Secretaries of the Army, Navy, and Air Force and the Commandant of the Marine Corps to take action, as appropriate and necessary, to resolve any issues identified through measuring the accuracy of planning inputs in an effort to improve supply and depot maintenance operations.

Agency: Department of Defense
Status: Open

Comments: DOD concurred with our recommendation. As of August 2018, DOD has begun to identify metrics that measure the accuracy of planning factors used for depot maintenance. However, these metrics are not scheduled to be implemented fully implemented in December 2018. Thus, no actions have been taken to resolve any identified issues based on the results of the metrics.

Recommendation: To be able to assess the cost-effectiveness of supply and depot maintenance operations, in accordance with DOD supply chain management guidance, the Secretary of Defense should direct the Assistant Secretary of Defense for Logistics and Materiel Readiness, in conjunction with the Director, Defense Logistics Agency, the Secretaries of the Army, Navy, and the Air Force, and the Commandant of the Marine Corps to take steps to develop and implement metrics, to the extent feasible, to measure and track disruption costs created by the lack of parts at depot maintenance industrial sites by, for example, establishing a team of supply and depot maintenance experts from DLA and the services to assess potential data sources, approaches, and methods.

Agency: Department of Defense
Status: Open

Comments: DOD concurred with our recommendation. As of August 2018, DOD has begun to develop metrics that measure and track disruption costs created by the lack of parts at depot maintenance industrial sites. However, these metrics are not scheduled to be implemented until October 2018.

Recommendation: To be able to assess the cost-effectiveness of supply and depot maintenance operations, in accordance with DOD supply chain management guidance, the Secretary of Defense should direct the Assistant Secretary of Defense for Logistics and Materiel Readiness, in conjunction with the Director, Defense Logistics Agency, the Secretaries of the Army, Navy, and the Air Force, and the Commandant of the Marine Corps to take action, as appropriate, to address any inefficiencies identified by the disruption cost metrics in supply and depot maintenance operations.

Agency: Department of Defense
Status: Open

Comments: DOD concurred with our recommendation. As of August 2018, DOD has begun to develop metrics that measure and track disruption costs created by the lack of parts at depot maintenance industrial sites. However, these metrics are not scheduled to be implemented until October 2018. Thus, no actions have been taken to resolve any identified issues based on the results of the metrics.

Recommendation: To ensure the Army retains accountability of SRC I ammunition in an in-transit status, consistent with DOD policy, the Secretary of Defense should direct the Secretary of the Army to evaluate and identify actions to enable the Army to retain accountability for in-transit items until acknowledgment of receipt.

Agency: Department of Defense
Status: Open

Comments: DOD concurred with this recommendation. As of January 2020, the Army is undergoing a financial audit of all munitions processes that affect the financial voucher, including the Material-In-Transit between locations, both wholesale and retail. The Army gained a consensus that until a unified record for both wholesale and retail is adopted, the shipping and receipt process will remain the same as that currently in use. An effort is underway to determine the best Army Enterprise Ammunition Supply Chain via an Other Transaction Agreement solution intended to provide a seamless supply chain from wholesale to the end user. The estimated completion date is September 2023.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Commerce should ensure a reliable department-wide inventory of mobile service contracts is developed and maintained.

Agency: Department of Commerce
Status: Open

Comments: As of January 2020, the Department of Commerce had not implemented this recommendation. In July 2018, the department provided an inventory that shows, by service provider and department component, the number of devices per rate plan and monthly rate; however, the inventory did not include the number of voice minutes, gigabytes of data, and text messages allowed per line per month. Furthermore, the department had not demonstrated that it had accounted for all of its mobile service contracts. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Commerce should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Commerce
Status: Open

Comments: As of January 2020, the department had not addressed the recommendation. In July 2018, the department described steps it was taking to identify lines that were inactive for a period of three or more continuous months (zero usage). However, as of January 2020, the department had not demonstrated that it has established documented procedures that address the elements of our recommendation. We will continue to monitor the department's progress.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Defense should ensure an inventory of mobile devices and services is established department-wide (i.e., all components' devices and associated services are accounted for).

Agency: Department of Defense
Status: Open

Comments: The Department of Defense partially concurred with our recommendation; however, as of January 2020, the department had not implemented it. In response to our report, the department stated that it agreed that such an inventory has merits, but that maintaining one comes at considerable expense and effort. The department also stated, in 2016, that while it does not maintain a single, centralized device level inventory, the military departments track and manage their own devices and services . As we stated in our report, the inventory need not be generated centrally at the headquarters level; the department can compile a comprehensive inventory using its components' complete inventories. As of January 2020, the department had not demonstrated that all its components had inventories of unique devices and associated services. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Defense should ensure a reliable department-wide inventory of mobile service contracts is developed and maintained.

Agency: Department of Defense
Status: Open

Comments: The Department of Defense stated that it partially concurred with our recommendation; and has taken steps to address it. However, as of January 2020, the department had not demonstrated that it had implemented the recommendation. In response to our report, the department stated that it agreed that developing an inventory of mobile device contracts has merits, especially in a time of restricted government spending. The department also described several efforts it had undertaken to enhance mobile device management. However, as we stated in our report, any approach to managing mobile device contracts will be hampered by the lack of complete information on the contracts that are already in place. In August 2018, the department developed an inventory of mobile service contracts. However, the department had not demonstrated that the inventory included all its components' mobile service contracts. In August 2019, the department described steps it was taking to ensure that it has a complete inventory of mobile service contracts. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Health and Human Services should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Health and Human Services
Status: Open

Comments: As of December 2019, the Department of Health and Human Services had not implemented this recommendation. We will continue to monitor the department's implementation of this recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Homeland Security should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Homeland Security
Status: Open

Comments: In October 2019, the Department of Homeland Security developed an asset and inventory management plan for managing devices under its enterprise blanket purchase agreement. The plan includes procedures for assessing devices for zero usage; however, it does not include procedures for assessing over and under usage. The department also has not demonstrated that it has established procedures for devices not covered by its enterprise blanket purchase agreement.We will continue to monitor the department's efforts.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Interior should ensure an inventory of mobile devices and services is established department-wide (i.e., all components' devices and associated services are accounted for).

Agency: Department of the Interior
Status: Open

Comments: The Department of the Interior has not demonstrated that it has fully implemented this recommendation. As of January 2020, the department demonstrated that only one of its components, the Bureau of Reclamation, had an inventory of mobile devices and associated services. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Interior should ensure a reliable department-wide inventory of mobile service contracts is developed and maintained.

Agency: Department of the Interior
Status: Open

Comments: As of January 2020, the Department of the Interior had not demonstrated that it had fully addressed this recommendation. In August 2019, the department developed an inventory of mobile service contracts. However, the department did not demonstrate that it had accounted for all of its mobile service contracts. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Attorney General should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Justice
Status: Open

Comments: As of January 2020, the Department of Justice has made progress implementing this recommendation; however, more remains to be done. Specifically, in response to our findings, in April 2015, the department's Chief Information Officer issued a memo that required components to establish procedures for regular reviews of invoices for wireless services to identify unused and underused devices or services, as well as any over-usage charges to service plans. One of the components we reviewed, the Federal Bureau of Investigation, established procedures in July 2016 to monitor mobile device usage. In addition, the Justice Management Division (JMD) established procedures in May 2019 that apply to JMD as well some but not all other components. The other component we reviewed in our report, the Drug Enforcement Agency, had not established procedures that address our recommendation. We will continue to monitor the department's progress.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of State should ensure an inventory of mobile devices and services is established department-wide (i.e., all components' devices and associated services are accounted for).

Agency: Department of State
Status: Open

Comments: As of January 2020, the Department of State had not demonstrated that it has implemented this recommendation. The department has inventories of mobile device; however, the inventories do not include the services associated with each device. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of State should ensure a reliable department-wide inventory of mobile service contracts is maintained.

Agency: Department of State
Status: Open

Comments: As of January 2020, the Department of State had not implemented this recommendation. In June 2019, the department said it has a Telecom Expense Management System which can be used to document an inventory of domestic service contracts; however, the department did not provide the inventory. Furthermore, the department did not demonstrate that it has an inventory of international service contracts. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Transportation should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Transportation
Status: Open

Comments: As of January 2020, the Department of Transportation had not addressed the recommendation. In December 2019, an official from the department's Audit Relations and Program Improvement office stated that all the department's telecommunication devices are managed through two programs and that these programs have mechanisms in place to ensure that telecommunications are managed in an effective and efficient manner. However, as of January 2020, the department had not provided evidence to demonstrate that it had implemented the recommendation. We will continue to monitor the department's efforts.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Treasury should ensure an inventory of mobile devices and services is established department-wide (i.e., all components' devices and associated services are accounted for).

Agency: Department of the Treasury
Status: Open

Comments: As of January 2020, the Department of the Treasury had not implemented the recommendation. In August 2019, the department stated that it had established enterprise-wide procurement vehicles for mobile devices. However, as of January 2020, the department had not demonstrated that it has an inventory of mobile devices and associated service information. We will continue to monitor the department's progress in implementing this recommendation.

Recommendation: To help the agency effectively manage spending on mobile devices and services, the Administrator of the National Aeronautics and Space Administration should ensure a complete inventory of mobile devices and associated services is established.

Agency: National Aeronautics and Space Administration
Status: Open

Comments: As of January 2020, the National Aeronautics and Space Administration (NASA) had not implemented the recommendation. We reported in May 2015, that NASA had an inventory of mobile devices and associated service information which included most, but not all, of the devices used by the agency. In November 2019, NASA's Office of the Chief Information Officer (OCIO) stated that the agency was in the process of enrolling devices in a new mobile device management tool, and that when the approximately 15 percent of devices that are not currently on NASA's new End-User Services Technology contract are brought on the contract, NASA will have a monthly deliverable depicting the services of all mobile devices. We will continue to monitor NASA's implementation of this recommendation.

Recommendation: To help the agency effectively manage spending on mobile devices and services, the Administrator of the National Aeronautics and Space Administration should ensure a reliable inventory of mobile service contracts is developed and maintained.

Agency: National Aeronautics and Space Administration
Status: Open

Comments: As of January 2020, the National Aeronautics and Space Administration (NASA) had not demonstrated that it has implemented the recommendation. NASA's Office of the Chief Information Officer (OCIO) stated that NASA had established, on September 1, 2019, the NASA End-User Services and Technology contract to procure mobile services, but as of November 2019, had not yet included 15 percent of its devices on the new contract. We will continue to monitor NASA's efforts to develop and maintain a mobile services contract inventory as described in our report.

Recommendation: To help the agency effectively manage spending on mobile devices and services, the Administrator of the National Aeronautics and Space Administration should ensure procedures to monitor and control spending are established agency-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: National Aeronautics and Space Administration
Status: Open

Comments: As of January 2020, the National Aeronautics and Space Administration (NASA) had not demonstrated that it had implemented the recommendation. In November 2019, NASA's Office of the Chief Information Officer (OCIO) stated that as part of enterprise mobility service contract deliverables, NASA requires monthly reports to monitor and optimize usage (zero, under, and over). NASA's OCIO also stated that the agency established role-based privileges to monitor and report on this activity agency-wide. However, the agency has not demonstrated that it has established procedures to assess device usage in accordance with our recommendation. We will continue to monitor NASA's implementation of the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Treasury should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of the Treasury
Status: Open

Comments: As of January 2020, the Department of the Treasury had not demonstrated that it has implemented the recommendation. In August 2019, an official from the department's Office of the Chief Information Officer stated that the department was collecting and analyzing information on voice and data utilization. However, as of January 2020, the department had not demonstrated that it had established procedures in accordance with our recommendation. We will continue to monitor the department's progress in implementing this recommendation.

Recommendation: To help ensure that the Navy has adequate oversight of on-order excess inventory termination decisions and necessary performance measures consistent with DOD guidance, the Secretary of the Navy should direct the Commander, Naval Supply Systems Command, to incorporate the graduated management reviews and the ability to track and review the reasons for not canceling and modifying on-order excess items into its automated termination module that is under development.

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: DOD concurred with our recommendation. As of August 2019, Naval Supply Systems Command has taken some steps, such as defining the requirement and piloting some aspects of the effort, to incorporate graduated management reviews and the ability to track and review the reason for not canceling and modifying on-order excess items into its automated termination module. However, this capability is not implemented into the automated termination module, according to Naval Supply Systems Command officials. Navy Supply Systems Command provided information on its plans to implement this capability in fiscal year 2020 and we will continue to monitor their efforts to address this implementation.

Recommendation: To effectively plan and manage its acquisitions of IT systems and increase the likelihood of delivering promised system capabilities on time and within budget, the Librarian should establish and implement an organization-wide policy for developing cost estimates that includes key practices as discussed in this report.

Agency: Library of Congress
Status: Open

Comments: The Library of Congress generally agreed with, and has begun to take steps to implement, this recommendation. Specifically, in January 2017 the Library established a centralized Library-wide Project Management Office, located within the Office of the Chief Information Officer (OCIO). Additionally, in June 2017 the Library updated its regulations to give the Project Management Office the authority to establish organization-wide policy for developing cost estimates. Further, in August 2017 the Project Management Office finalized guidance for developing cost estimates that generally includes the key practices discussed in our report. However, none of the cost estimates for three key investments fully met the practices associated with a comprehensive estimate. In October 2019, the Library provided evidence of its Monte-Carlo risk assessment process. We are currently assessing whether this process is consistent with the practices found in our Cost Estimating and Assessment Guide. We will continue to evaluate the Library's progress in implementing this recommendation.

Recommendation: To effectively plan and manage its acquisitions of IT systems and increase the likelihood of delivering promised system capabilities on time and within budget, the Librarian should establish a time frame for finalizing and implementing an organization-wide policy for developing and maintaining project schedules that includes key practices as discussed in this report, and finalize and implement the policy within the established time frame.

Agency: Library of Congress
Status: Open

Comments: The Library of Congress generally agreed with, and has begun to take steps to implement, this recommendation. Specifically, in January 2017 the Library established a Project Management Office within the Office of the Chief Information Officer (OCIO) and tasked the office with communicating and enforcing Library requirements for project management and systems development. Additionally, in June 2017 the Library updated its regulations to give the Project Management Office the authority to establish organization-wide policy for developing and maintaining schedules. Further, in August 2017 the Project Management Offices finalized guidance for developing schedules that generally includes the key practices discussed in our report. However, none of the schedules for three key investments fully met the practices associated with a well-constructed schedule. In October 2019, the Library provided the schedules that it uses to manage select projects. We are currently reviewing this scheduling documentation to determine the extent to which the Library is implementing its scheduling guidance.

Recommendation: To ensure the effective management of software licenses, the Secretary of Commerce should provide software license management training to appropriate agency personnel addressing contract terms and conditions, negotiations, laws and regulations, acquisition, security planning, and configuration management.

Agency: Department of Commerce
Status: Open

Comments: In April 2018, the Department of Commerce reported that training will be concurrent with the implementation of the new inventory. It estimates the completion of this to be June 30, 2019. In October 2017, the department reported that they were reaching out to another federal agency to learn about the software license management training they offer to incorporate lessons learned into the Commerce's future training plans. However, as of November 2019, the department has not provided an update on these efforts. GAO will continue to monitor the department's progress in implementing this recommendation.

Recommendation: To ensure the effective management of software licenses, the Secretary of Transportation should develop an agency-wide comprehensive policy for the management of software licenses that addresses the weaknesses we identified.

Agency: Department of Transportation
Status: Open

Comments: In April 2018, the Department of Transportation stated that it has developed a policy addressing components of centralized management and management of software licenses through the entire life cycle. However, Transportation's Order 1351.21 was issued in June 2009 and has not been updated since our report was issued to include the weaknesses we identified. Specifically, the order identifies the roles and responsibility, and central oversight authority for managing enterprise license agreements and does not specify policy on establishing goals and objectives of the software license management program and considering the software license management life-cycle phases to implement effect decision making and incorporate existing standards, processes, and metrics. We will follow up with the department to obtain evidence of the department-wide implementation of this recommendation.

Recommendation: To ensure the effective management of software licenses, the Adminitrator of the Environmental Protection Agency should develop an agency-wide comprehensive policy for the management of software licenses that addresses the weaknesses we identified.

Agency: Environmental Protection Agency
Status: Open

Comments: In April 2018, the Environment Protection Agency reported that it is currently taking steps to develop a comprehensive policy that will address a centralized management program of licenses, an analysis to inform decision making, education and training goals and overall management throughout the lifecycle. In addition, The Agency stated that it is still leveraging the efforts of the Continuous Diagnostics and Mitigation project as well as its Office of Acquisition Management's consolidation of its Microsoft suite. We will follow up with the agency to obtain supporting documents and continue to monitor its progress in implementing this recommendation.

Recommendation: To ensure the effective management of software licenses, the Adminitrator of the Environmental Protection Agency should employ a centralized software license management approach that is coordinated and integrated with key personnel for the majority of agency software license spending and/or enterprise-wide licenses.

Agency: Environmental Protection Agency
Status: Open

Comments: In April 2018, the Environment Protection Agency reported that it is currently taking steps to develop a comprehensive policy that will address a centralized management program of licenses. In addition, the agency stated that it is still leveraging the efforts of the Continuous Diagnostics and Mitigation project as well as leveraging its Office of Acquisition Management's consolidation of enterprise licenses. We will follow up with the agency to obtain supporting documents and continue to monitor its progress in implementing this recommendation.

Recommendation: To ensure the effective management of software licenses, the Chairman of the Nuclear Regulatory Commission should provide software license management training to appropriate agency personnel addressing contract terms and conditions, negotiations, laws and regulations, acquisition, security planning, and configuration management.

Agency: Nuclear Regulatory Commission
Status: Open

Comments: In March 2019, the Nuclear Regulatory Commission reported that the agency's IT asset management program requires training and communication, as appropriate for all key personnel. The agency also reported that on September 19, 2018, personnel associated with software asset management attended relevant training and will also participate in software training is currently being developed by the Office of Management and Budget, the Federal Acquisition Institute and the Defense Acquisition University. We will follow up with the agency to obtain supporting documents and continue to monitor its progress in implementing this recommendation.

Recommendation: To ensure the effective management of software licenses, the Director of the Office of Personnel Management should develop an agency-wide comprehensive policy for the management of software licenses that addresses the weaknesses we identified

Agency: Office of Personnel Management
Status: Open

Comments: The Office of Personnel Management concurred with this recommendation and in September 2015, reported that it had developed a guide to capture enterprise architecture lifecycle activities including software licensing management, acquisition, and requirements during several points of the project lifecycle. In April 2018, the office reported they have no changes to the status of this recommendation, but expect substantive updates later this year. We will continue to monitor its progress in implementing this recommendation.

Recommendation: To ensure the effective management of software licenses, the Director of the Office of Personnel Management should employ a centralized software license management approach that is coordinated and integrated with key personnel for the majority of agency software license spending and/or enterprise-wide licenses.

Agency: Office of Personnel Management
Status: Open

Comments: The Office of Personnel Management (OPM) concurred with this recommendation and in September 2015 reported that it is finalizing a revised Life Cycle Management draft policy which will use stage gate reviews to evaluate the progress of projects including software licenses throughout the agency. According to OPM, once the new policy is approved, OPM subject matter experts will review project documentation during stage gates reviews to make written recommendations on whether projects should continue. OPM's Investment Review Board will then review that recommendation and other procurement documentation to make a final recommendation to the OPM Director. In April 2018, OPM reported they have no changes to the status of this recommendation, but expect substantive updates later this year. We plan to continue to monitor its progress in implementing this recommendation.

Recommendation: To ensure the effective management of software licenses, the Director of the Office of Personnel Management should establish a comprehensive inventory of software licenses using automated tools for the majority of agency software license spending and/or enterprise-wide licenses.

Agency: Office of Personnel Management
Status: Open

Comments: The Office of Personnel Management (OPM) concurred with this recommendation and in September 2015 OPM reported that it acquired an enterprise architecture repository tool and is collecting information on its software applications. OPM also reported that it is assembling and performing quality reviews on hardware and software lists currently maintained in spreadsheets, in its enterprise architecture systems database, and Remedy database in order to consolidate the entire hardware and software asset inventory. In April 2018, OPM reported they have no changes to the status of this recommendation, but expect substantive updates later this year. We will continue to monitor its progress in implementing this recommendation.

Recommendation: To ensure the effective management of software licenses, the Director of the Office of Personnel Management should regularly track and maintain a comprehensive inventory of software licenses using automated tools and metrics.

Agency: Office of Personnel Management
Status: Open

Comments: The Office of Personnel Management (OPM) concurred with this recommendation and in September 2015 OPM reported that it acquired an enterprise architecture repository tool and is collecting information on its software applications. In April 2018, OPM reported they have no changes to the status of this recommendation. We will continue to monitor its progress in implementing this recommendation.

Recommendation: To ensure the effective management of software licenses, the Director of the Office of Personnel Management should analyze agency-wide software license data, such as costs, benefits, usage, and trending data, to identify opportunities to reduce costs and better inform investment decision making.

Agency: Office of Personnel Management
Status: Open

Comments: The Office of Personnel Management (OPM) concurred with our recommendations and noted actions the agency plans to take. In April 2018, OPM reported they have no changes to the status of this recommendation. We will continue to monitor its progress in implementing this recommendation.

Recommendation: To ensure the effective management of software licenses, the Director of the Office of Personnel Management should provide software license management training to appropriate agency personnel addressing contract terms and conditions, negotiations, laws and regulations, acquisition, security planning, and configuration management.

Agency: Office of Personnel Management
Status: Open

Comments: The Office of Personnel Management concurred with our recommendations and noted actions the agency plans to take. In April 2018, OPM reported they have no changes to the status of this recommendation. We will continue to monitor its progress in implementing this recommendation.