Reports & Testimonies

Share This:

Recommendations Database

GAO’s recommendations database contains report recommendations that still need to be addressed. GAO’s priority recommendations are those that we believe warrant priority attention. We sent letters to the heads of key departments and agencies, urging them to continue focusing on these issues. Below you can search only priority recommendations, or search all recommendations.

Our recommendations help congressional and agency leaders prepare for appropriations and oversight activities, as well as help improve government operations. Moreover, when implemented, some of our priority recommendations can save large amounts of money, help Congress make decisions on major issues, and substantially improve or transform major government programs or agencies, among other benefits.

As of October 25, 2020, there are 4812 open recommendations, of which 473 are priority recommendations. Recommendations remain open until they are designated as Closed-implemented or Closed-not implemented.

Browse or Search Open Recommendations

Priority recommendations only All recommendations

Browse

Search

Have a Question about a Recommendation?

For questions about a specific recommendation, contact the person or office listed with the recommendation.
For general information about recommendations, contact GAO's Audit Policy and Quality Assurance office at (202) 512-6100 or apqa@gao.gov.

« Back to Results List Sort by

Results:

Federal Agency: "Office of Congressional Workplace Rights"

2 publications with a total of 11 open recommendations

Download these results in CSV format or XLSX format.

Office of Congressional Workplace Rights: Weaknesses in Cybersecurity Management and Oversight Need to Be Addressed
GAO-20-199, Feb 11, 2020

Director: Nick Marinos
Phone: (202) 512-9342

5 open recommendations

Display

Recommendation: The Executive Director should ensure the development and implementation of policies and procedures for incorporating key cybersecurity activities into IT project planning, including scheduling, requirements management, and risk management. (Recommendation 1)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: In January 2020, OCWR noted that it was in the process of revising its IT systems project planning to ensure the development and implementation of policies and procedure incorporating key cybersecurity activities. The agency also stated that it plans to hire an IT Security Project Manager in order to acquire the necessary cybersecurity expertise needed to implement this recommendation and to ensure that sufficient time and resources can be dedicated to the development and implementation of these policies and procedures. We will continue to monitor OCWR's progress in addressing this recommendation.

Recommendation: The Executive Director should ensure the development and implementation of oversight procedures for each externally-operated system that include (1) establishing security and privacy requirements, (2) planning the assessment of security controls, (3) conducting the assessment, and, (4) reviewing the assessment. (Recommendation 2)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: In January 2020, OCWR noted that it was beginning to plan for developing and implementing oversight procedures for each externally-operated system. We will continue to monitor OCWR's progress in addressing this recommendation.

Recommendation: The Executive Director should ensure the establishment of roles and responsibilities for a risk executive function. (Recommendation 3)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: In January 2020, OCWR noted that it had expanded the office's IT Director's role to formally include the functions of an IT Risk Executive and was in the process of establishing the roles and responsibilities. We will continue to monitor OCWR's progress in addressing this recommendation.

Recommendation: The Executive Director should ensure the development and implementation of a cybersecurity risk management strategy. (Recommendation 4)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: In January 2020, OCWR noted that it was beginning to plan for developing and implementing a cybersecurity risk management strategy. We will continue to monitor OCWR's progress in addressing this recommendation.

Recommendation: The Executive Director should ensure commitment to a time frame for developing and implementing policies and procedures for managing cybersecurity risk. (Recommendation 5)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: In January 2020, OCWR noted that, once the position of IT Security Project Manager is filled and the IT Risk Executive functions are formalized, the agency is planning to commit to a time frame for developing and implementing policies and procedures for managing cybersecurity risk. We will continue to monitor OCWR's progress in addressing this recommendation

Office of Congressional Workplace Rights: Using Key Management Practices Would Help to Fully Implement Statutory Requirements
GAO-20-222, Dec 30, 2019

Director: Yvonne D. Jones
Phone: (202) 512-6806

6 open recommendations

Display

Recommendation: The Executive Director of OCWR, in collaboration with relevant managers, should establish a policy that requires a schedule of tasks to be developed, documented, and updated throughout the lifetime of IT system projects. (Recommendation 1)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: The agency agreed with the recommendation. OCWR officials stated that they will be implementing a policy to ensure that project planning steps, including a schedule of tasks, will be included and documented for future IT projects.

Recommendation: The Executive Director of OCWR should identify and assess risks in establishing and maintaining a permanent records retention program, and develop policies and procedures to ensure that risks are properly addressed. (Recommendation 2)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: The agency agreed with the recommendation. OCWR officials stated that they have hired a contractor to assist with various risk management activities related to OCWR's permanent records retention program, including identifying and assessing risks and developing policies and procedures to address any risks.

Recommendation: The Executive Director of OCWR should identify desired performance results, develop performance measures that demonstrate the degree to which the desired results were achieved, and report progress toward those results in OCWR's annual reports. (Recommendation 3)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: The agency agreed with the recommendation. OCWR officials stated that they are reassessing desired performance results, developing new performance measures to monitor progress towards those results, and will clearly report OCWR's progress in future annual reports.

Recommendation: The Executive Director of OCWR should collect relevant data through a survey or other mechanisms, and use the information to evaluate the effectiveness of education and outreach efforts and the extent to which they are reaching all covered legislative branch populations. (Recommendation 4)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: The agency agreed with the recommendation. According to OCWR officials, they are working with congressional oversight committees and covered legislative branch offices to obtain data through surveys or other methods that will enable them to evaluate the effectiveness and coverage of OCWR's education and outreach efforts.

Recommendation: The Executive Director of OCWR should integrate IT planning and implementation into the agency's strategic planning process. (Recommendation 5)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: The agency agreed with the recommendation. OCWR officials stated that they intend to revise the agency's strategic plan, including integrating IT planning and implementation into the strategic planning process, after they gain more experience with the new procedures required by the Congressional Accountability Act (CAA) Reform Act of 2018.

Recommendation: The Executive Director of OCWR should incorporate key strategic human capital management practices, such as developing strategies to recruit and retain staff with mission-critical skills, into the strategic planning process. (Recommendation 6)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: The agency agreed with the recommendation. OCWR officials reported that they hired a contractor to better incorporate key management practices, such as developing strategies for recruiting and retaining staff with mission-critical skills, into OCWR's human capital plan and strategic planning process.