Recommendation: The Director of the Office of Personnel Management should ensure that the agency fully implements each of the eight key IT workforce planning activities it did not fully implement. (Recommendation 15)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: In December 2019, OPM stated that it had partnered with the General Services Administration's IT Modernization Center of Excellence to assess the current state of its IT workforce planning activities, but had not yet implemented any of the eight key planning activities we recommended. We will continue to monitor OPM's efforts to implement the recommendation.

Recommendation: The Director of OPM should establish a process for conducting an organization-wide cybersecurity risk assessment. (Recommendation 54)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM concurred with this recommendation. As of January 2020, the office stated that it planned to formalize its process for an organization-wide cybersecurity assessment. Once OPM has provided evidence of these actions, we plan to verify whether implementation has occurred.

Recommendation: The Associate Director of OPM's Retirement Services, working in coordination with the Chief Information Officer, should develop, document, and implement a Retirement Services IT modernization plan for initial project phases that is consistent with key aspects of IT project management, such as determining objectives, costs, and time frames for each initial phase. (Recommendation 1)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM partially concurred with the recommendation. OPM stated that it has established initial high-level funding estimates for each of its five key IT initiatives. OPM cited that its ability to implement the modernization plan depends on the availability of funding and coordination with the agency's top leadership. In December 2019, OPM stated that it was evaluating what corrective actions it plans to take. In April 2020, GAO contacted OPM about the status of this recommendation and we are awaiting a response.

Recommendation: The Director of OPM, in consultation with the Chief Human Capital Officers (CHCO) Council, should establish and implement a process for regularly updating the performance management website to include all available guidance and resources, making this information easily accessible, and providing links to other related websites. (Recommendation 1)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM agreed with this recommendation. As of January 2020, OPM stated that they had identified available guidance and resources and updated the OPM Performance Management website. Additionally, OPM stated that they were establishing and documenting a process, which will be documented via standard operating procedures, to regularly update the performance management website with available guidance and resources. To fully address this recommendation, OPM needs to implement that process, which it indicated it plans to do by the end of fiscal year 2020.

Recommendation: The Director of OPM, in consultation with the CHCO Council, should develop and implement a mechanism for agencies to routinely and independently share promising practices and lessons learned, such as through allowing agencies to post such information on OPM's Performance Management portal. (Recommendation 2)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM agreed with this recommendation. As of January 2020, OPM stated that they had developed and implemented a mechanism for agencies to routinely and independently share promising practices and lessons learned on OPM's Performance Management Portal and would evaluate its effectiveness moving forward. To fully implement the recommendation. OPM stated they are continuing to engage agency stakeholders and evaluate the effectiveness of their efforts. OPM stated they plan to be able to to close this recommendation during fiscal year 2020.

Recommendation: The Director of OPM, in consultation with the CHCO Council, should develop a strategic approach for identifying and sharing emerging research and innovations in performance management. (Recommendation 3)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM agreed with this recommendation. As of January 2020, OPM stated that it is working with OMB, Cross-Agency Priority Goal Leaders, and other representatives from across government to develop a comprehensive strategic approach for identifying and sharing emerging research and innovations. According to OPM, the next working group meeting is scheduled for the summer of 2020. As of January 2020, OPM stated they are implementing certain strategic approaches for identifying and sharing emerging research and innovations in performance management. OPM stated they are also developing a white paper on agency reskilling efforts, likely focusing on engagement and retention, which would better position supervisors to engage in innovative performance management practices on a routine basis. OPM stated they aim to to close this recommendation by the end of the calendar year.

Recommendation: The Director of OPM, after consultation with the CHCO Council, should broadly disseminate to agencies the promising practices and lessons learned, such as those described in this report, as well as work with agencies through such vehicles as the CHCO Council, to identify any additional practices. (Recommendation 2)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM partially agreed with this recommendation. In December 2018, OPM stated that it plans to continue to use promising practices and to issue guidance on progressive discipline and tables of penalties. On July 2, 2019, OPM restated it partially concurs with this recommendation. OPM stated that it issued a guidance memorandum to Federal agencies on October 10, 2018, to aid in the implementation of Executive Order 13839, section 5, Ensuring Integrity of Personnel Files. As of January, 2020, OPM stated they are finalizing compiling disciplinary data collected from agencies under that Executive Order and anticipates it will be posted in the near future on OPM.gov. OPM also stated they are in the process of updating online employee relations training to be made available to human resources practitioners and managers later this year.

Recommendation: The Director of OPM, after consultation with the CHCO Council, should provide guidance to agencies to enhance the training received by managers/supervisors and human capital staff to ensure that they have the guidance and technical assistance they need to effectively address misconduct and maximize the productivity of their workforces. (Recommendation 3)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM partially agreed with this recommendation. On September 17, 2019, OPM published a proposed rule pertaining to probationary periods, performance-based actions, and adverse actions. The public comment period for this proposed rule closed on October 17, 2019. As of January 2020, OPM said they received comments from 1,199 individuals. OPM stated that they are reviewing, analyzing, and adjudicating all comments received in order to prepare a final rule later in 2020. Once the final rule is published, OPM stated they will work with the CHCO Council to educate supervisors on the new rule in accordance with Executive Order 13839.

Recommendation: The Director of OPM, together with the CHCO Council, should track government-wide data to establish a baseline and analyze the extent to which the seven Title 5 special payment authorities are effective in improving employee recruitment and retention, and determine what potential changes may be needed to improve the seven authorities' effectiveness. (Recommendation 1)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM partially concurred with the recommendation and said that by August 2018, OPM would (1) track Governmentwide data to establish a baseline of agency use of the seven Title 5 special payment authorities by occupation with a focus on mission-critical occupations; and (2) work with the CHCO Council to determine what changes may be needed to improve the seven authorities' effectiveness. OPM said agencies are in the best position to analyze the extent to which special pay authorities, when used in conjunction with other human resources flexibilities, improve their ability to recruit and retain their employees. However, we noted that by working with the agencies through the CHCO Council, OPM would be better positioned to track government-wide data to analyze the extent to which Title 5 special payment authorities improve employee recruitment and retention. In December 2018, OPM told us that it established a baseline to measure changes over time, on an annual basis, regarding the use of the seven special payment authorities. OPM also stated that it is working with the CHCO Council to administer a survey to obtain agency input on how to improve the authorities' effectiveness. In May 2019, OPM provided documented analyses of the extent agencies use special payment authorities for various occupations, but provided no information on actions taken with the CHCO council as we recommended. More specifically, to fully implement the recommendation OPM needs to work with the CHCO Council to analyze changes in government-wide data and the extent to which the seven special payment authorities are effective. We will update the status of actions to implement this recommendation as OPM provides any documentation responsive to it, as we requested in September 2019 and further coordinated with OPM in June 2020.

Recommendation: To further improve security over personnel and other sensitive information at the agency, the Acting Director of OPM should improve the timeliness of validating evidence associated with actions taken to address the US-CERT recommendations.

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM partially concurred with the recommendation. OPM has improved its POA&M management system. Using this system, the agency provided, on 08-27-19, milestones showing timely validation of evidence for closing one US-CERT recommendation. However, OPM has not provided support showing timely validation of 16 other US-CERT recommendations that it has closed. OPM needs to provide evidence of timely validation of these 16 completed recommendations, or evidence for the two US-CERT recommendations that remain open, once these two have been closed and validated. As of March 2020, OPM has not yet provided evidence of taking such actions.

Recommendation: To further improve security over personnel and other sensitive information at the agency, the Acting Director of OPM should develop and implement role-based training requirements for staff using Continuous Diagnostics and Mitigation tools.

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM concurred with the recommendation. In December 2018, OPM stated that it is working with its learning management system vendor to develop role-based training requirements for its continuous monitoring program, but had not yet targeted an expected completion date. To fully implement the recommendation, OPM needs to issue role-based training requirements for individuals who configure and maintain the deployed continuous diagnostics and mitigation tools. As of March 2020, OPM has not yet provided evidence of taking such actions.

Recommendation: To support its strategic and open data goals, the Director of OPM should improve the availability of the EHRI payroll data--for example, by preparing the data for analytics, making them available through online tools such as FedScope, and including them among the EHRI data sources on the OPM website and Data.gov.

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM agreed with the recommendation. In December 2018, OPM told us it will establish a plan to make payroll data available through analytical tools such as FedScope no later than the fourth quarter of fiscal year 2019. To fully implement the recommendation, OPM will need to improve the availability of payroll data-either from the existing EHRI system or the new employee digital record-by ensuring the data are prepared and made available for analytics research.

Recommendation: To improve internal controls for data quality, the Director of OPM should consistently monitor system-generated error and edit check reports and ensure that timely action is taken to address identified issues.

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM agreed with the recommendation. In December 2018, OPM reported that it plans to begin follow-up efforts with agencies and shared service providers on payroll data errors and anomalies and to notify data providers of problems. To fully implement the recommendation, OPM will need to follow up with shared services centers and agencies regarding issues identified with the payroll data they submit to EHRI. These steps will help ensure the quality of historical and current payroll data. They will also ensure that system detected errors are resolved and do not compound over time.

Recommendation: To help strengthen the government's ability to compete in the labor market for top talent, and to improve the federal hiring process, the Director of OPM, in conjunction with the CHCO Council, should use this information to determine whether opportunities exist to refine, consolidate, eliminate, or expand agency-specific authorities to other agencies and implement changes where OPM is authorized, including seeking presidential authorization (as necessary) in order to do so. In cases where legislation would be necessary to implement changes, OPM should work with the CHCO Council to develop legislative proposals.

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM agreed with this recommendation and has taken actions to address it since GAO's August 2016 report. In April 2019, OPM issued final regulations implementing changes to direct hire authority to provide certain agencies with the ability to hire urgently needed information technology professionals more quickly. It also plans to provide in-person support to the Chief Human Capital Office council, Chief Information Officers Council, and human resources professionals and managers on how to use this new authority. In its fiscal year 2021 Congressional Budget Justification released on February 10, 2020, OPM noted that it was seeking to improve hiring by using flexibilities that exist within current authority. These include, for example, noncompetitive term-limited appointments of highly qualified experts, expansion of term/temporary hiring authorities, and limited noncompetitive hiring of students and recent graduates. However, some of these plans were initially introduced in the prior year's justification and progress continues to be unclear. Additionally, OPM said that it is currently reassessing administration priorities and was unable to provide further updates. While OPM has made some progress in this area, it will be important for the agency to prioritize and follow through on its planned actions to streamline hiring authorities. Expanding access to hiring authorities found to be highly efficient and effective while eliminating those found to be less effective would help simplify and improve the federal hiring process.

Recommendation: To improve agency information security programs, Acting Director of the Office of Personnel Management should provide and track specialized training for all individuals, including contractors, who have significant security responsibilities.

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM partially agreed with this recommendation. In December 2018, OPM stated that it is working with its learning management system vendor to develop requirements, but had not yet targeted an expected completion date. To fully implement the recommendation, OPM needs to complete its efforts to ensure that it provides and tracks training for individuals with significant security responsibilities. As of March 2020, OPM has not provided evidence that it has completed these actions.

Recommendation: To ensure that OPM builds the predictive capacity to identify emerging skills gaps across the government--including the ability to collect and use reliable information on the competencies of the federal workforce for government-wide workforce analysis--the Director of OPM should (1) establish a schedule specifying when OPM will modify its Enterprise Human Resources Integration database to capture staffing data that it currently collects from agencies through its annual workforce data reporting process; and (2) work with agency CHCOs to bolster the ability of agencies to assess workforce competencies by sharing competency surveys, lessons learned, and other tools and resources.

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: Although OPM did not initially concur with this recommendation, OPM has taken actions towards addressing it by using the EHRI database, in combination with other sources, to generate workforce data to assist agencies in their efforts to identify skills gaps. In March 2019, OPM reported that it believed that collecting staffing gap targets through an alternative system, MAX Collect, would provide a more efficient and accurate means to collect workforce data than EHRI. In February 2020, OPM officials reported that it has used MAX Collect to address a portion of the recommendation by sharing lessons learned to close skills gaps. MAX Collect also stores and makes relevant tools and training available to users. However, OPM still needs to collect and store a consistent set of staffing and competency data. Without the collection and sharing of this data, OPM cannot perform valuable government-wide analysis to predict and address skills gaps in occupations affecting multiple agencies.

Recommendation: To improve the classification system and to strengthen OPM's management and oversight, the Director of OPM, working through the Chief Human Capital Officer Council, and in conjunction with key stakeholders such as the Office of Management and Budget, unions, and others, should use prior studies and lessons learned from demonstration projects and alternative systems to examine ways to make the GS system's design and implementation more consistent with the attributes of a modern, effective classification system. To the extent warranted, develop a legislative proposal for congressional consideration.

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: In January 2020, OPM told us that it continues to concur with GAO's recommendation, however, in order to pursue examining such changes, OPM would need to be appropriately resourced. OPM reported that during 2019, it began studies to identify challenges agencies may experience with implementing OPM-issued classification standards. OPM believe this information, in addition to other prior studies and lessons learned, would help inform the examination going forward at a point in time OPM is resourced to do so. OPM reported it has continued to review and update individual series, despite broader efforts to evaluate the GS system as a whole. To fully implement the recommendation, OPM still needs to work in conjunction with key stakeholders such as OMB and unions; complete its review of studies and lessons learned; and if warranted, develop a legislative proposal to make the GS system's design and implementation more consistent with the attributes of a modern, effective classification system.