Reports & Testimonies

  1. Share with Facebook 
  2. Share with Twitter 
  3. Share with LinkedIn 
  4. Share with mail 

Recommendations Database

GAO’s recommendations database contains report recommendations that still need to be addressed. GAO’s priority recommendations are those that we believe warrant priority attention. We sent letters to the heads of key departments and agencies, urging them to continue focusing on these issues. Below you can search only priority recommendations, or search all recommendations.

Our recommendations help congressional and agency leaders prepare for appropriations and oversight activities, as well as help improve government operations. Moreover, when implemented, some of our priority recommendations can save large amounts of money, help Congress make decisions on major issues, and substantially improve or transform major government programs or agencies, among other benefits.

As of October 25, 2020, there are 4812 open recommendations, of which 473 are priority recommendations. Recommendations remain open until they are designated as Closed-implemented or Closed-not implemented.

Browse or Search Open Recommendations

Search


Have a Question about a Recommendation?

  • For questions about a specific recommendation, contact the person or office listed with the recommendation.
  • For general information about recommendations, contact GAO's Audit Policy and Quality Assurance office at (202) 512-6100 or apqa@gao.gov.

« Back to Results List Sort by   

Results:

Subject Term: "Personal identification numbers"

2 publications with a total of 8 open recommendations including 2 priority recommendations
Download these results in CSV format or XLSX format.
Data Protection: Federal Agencies Need to Strengthen Online Identity Verification Processes
GAO-19-288, May 17, 2019
Director: Nick Marinos
Phone: (202) 512-9342

2 open recommendations
including 2 priority recommendations
Display
Recommendation: The Administrator of the Centers for Medicare and Medicaid Services should develop a plan with time frames and milestones to discontinue knowledge-based verification, such as by using Login.gov or other alternative verification techniques. (Recommendation 1)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open
Priority recommendation

Comments: HHS, on behalf of CMS, did not concur with this recommendation. In its February 2020 response to GAO, HHS stated that current NIST guidance to agencies was insufficient and that CMS would look forward to future guidance from NIST and OMB to help guide consideration of non-knowledge-based verification options. We continue to believe that our recommendation is valid because a variety of alternative methods to knowledge-based verification are available that CMS can consider to address the diverse population it serves. Further, NIST has agreed with our recommendation to develop additional guidance for agencies, and CMS may be able to use that guidance to identify a verification approach that does not really on knowledge-based techniques. We will continue to monitor the actions CMS may take to address the recommendation.
Recommendation: The Secretary of the Department of Veterans Affairs should develop a plan with time frames and milestones to discontinue knowledge-based verification, such as by using Login.gov or other alternative verification techniques. (Recommendation 6)

Agency: Department of Veterans Affairs
Status: Open
Priority recommendation

Comments: VA agreed with our recommendation. To fully implement this recommendation, VA needs to develop a plan with milestones to document the results of their evaluation of the alternatives the department stated it is interested in pursuing.
Federal Student Aid: Better Program Management and Oversight of Postsecondary Schools Needed to Protect Student Information [Reissued on December 15, 2017]
GAO-18-121, Nov 27, 2017
Director: Nick Marinos
Phone: (202) 512-9342

6 open recommendations
Display
Recommendation: The Secretary of Education should direct the Chief Operating Officer of FSA to establish and document a procedure for the destruction of records contained in electronic systems in accordance with approved disposition schedules. (Recommendation 1)

Agency: Department of Education
Status: Open

Comments: As of August 2019, FSA stated they have addressed the recommendation, but it is still undergoing an internal review. Once we receive documentation, we will determine if it addresses the recommendation.
Recommendation: The Secretary of Education should direct the Chief Operating Officer of FSA to ensure staff receive records management training annually. (Recommendation 2)

Agency: Department of Education
Status: Open

Comments: As of August 2019, FSA stated they have addressed the recommendation, but it is still undergoing an internal review. Once we receive documentation, we will determine if it addresses the recommendation.
Recommendation: The Secretary of Education should direct the Chief Operating Officer of FSA to conduct the triennial assessment of the FSA records management program. (Recommendation 3)

Agency: Department of Education
Status: Open

Comments: As of August 2019, FSA stated they have addressed the recommendation, but it is still undergoing an internal review. Once we receive documentation, we will determine if it addresses the recommendation.
Recommendation: The Secretary of Education should direct the Chief Operating Officer of FSA to ensure that privacy impact assessments address all required elements. (Recommendation 4)

Agency: Department of Education
Status: Open

Comments: As of August 2019, FSA stated they have addressed the recommendation, but it is still undergoing an internal review. Once we receive documentation, we will determine if it addresses the recommendation.
Recommendation: The Secretary of Education should direct the Chief Operating Officer of FSA to ensure that information security-related policies and procedures are reviewed at least annually, in accordance with FSA policy; updated as needed; and approved by security officials. (Recommendation 5)

Agency: Department of Education
Status: Open

Comments: As of August 2019, FSA stated they have addressed the recommendation, but it is still undergoing an internal review. Once we receive documentation, we will determine if it addresses the recommendation.
Recommendation: The Secretary of Education should update its regulation to include protections of personal information as an element of a school's ability to demonstrate its administrative capability. (Recommendation 7)

Agency: Department of Education
Status: Open

Comments: As of August 2019, FSA stated they have addressed the recommendation, but it is still undergoing an internal review. Once we receive documentation, we will determine if it addresses the recommendation.