Recommendation: Regarding financial sector cyber risk mitigation efforts, we recommend that the Secretary of the Treasury, in coordination with the Department of Homeland Security and other federal and nonfederal sector partners, track the content and progress of sectorwide cyber risk mitigation efforts, and prioritize their completion according to sector goals and priorities in the sector-specific plan. (Recommendation 1)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: Regarding the financial sector-specific plan, we recommend that the Secretary of the Treasury, in coordination with the Department of Homeland Security and other federal and nonfederal sector partners, update the financial services sector-specific plan to include specific metrics for measuring the progress of risk mitigation efforts and information on how the sector's ongoing and planned risk mitigation efforts will meet sector goals and requirements, such as requirements for the financial services sector in the National Cyber Strategy Implementation Plan. (Recommendation 2)

Agency: Department of the Treasury
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of BOP should update its program evaluation plan to set a new timeline for conducting an evaluation of FPI. (Recommendation 1)

Agency: Department of Justice: Bureau of Prisons
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: In order to help promote a meaningful program assessment, the Director of BOP should develop a goal for FPI related to recidivism reduction and measure progress toward meeting that goal.(Recommendation 2)

Agency: Department of Justice: Bureau of Prisons
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The TSA Administrator should update the BASE cybersecurity template to ensure it reflects cybersecurity key practices, including the Detect and Recover functions outlined in the NIST Cybersecurity Framework. (Recommendation 2)

Agency: Department of Homeland Security: Transportation Security Administration
Status: Open

Comments: TSA concurred with this recommendation and said it would take steps to implement it by updating the BASE Cybersecurity Security Action Item section to ensure it reflects the NIST Cybersecurity Framework Detect and Recover functions. When we confirm what actions TSA has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Homeland Security should direct the Director of ICE to develop a strategy for the TTU program to ensure that ICE has a plan to guide its efforts to effectively partner with existing TTUs, and to expand the program, where appropriate, into additional countries. (Recommendation 1)

Agency: Department of Homeland Security: Office of the Secretary
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Homeland Security should direct the Director of ICE to develop a performance monitoring framework for the TTU program that would enable the agency to systematically track program results and how effectively it is achieving the program's goals. (Recommendation 2)

Agency: Department of Homeland Security: Office of the Secretary
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should ensure that the Assistant Secretary of Defense for Sustainment, in collaboration with the military departments, provide updated guidance for the oversight of privatized military housing, to include oversight objectives for each service to monitor the physical condition of privatized homes over the remaining duration of the ground leases. (Recommendation 1)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open

Comments: The Department of Defense (DOD) concurred with this recommendation. In its August 2020 response, DOD noted that the Assistant Secretary of Defense for Sustainment (ASD (S)), as the Chief Housing Officer, issued guidance requiring the military departments to monitor work order completion for housing privatized under the Military Housing Privatization Initiative based on a combination of resident input, timeliness of work order completion, and number of repeat work orders for the same repair. The guidance also required increased tracking of MHPI project work orders by installation staff. Moving forward, the ASD(S) plans to issue quarterly program review guidance that establishes oversight objectives for the military departments to monitor the physical condition of MHPI housing over the duration of their project ground leases, formalizing the requirement that the data be monitored by the Chief Housing Officer. DOD expects this to be completed by December 2020. We will continue to monitor the status of this recommendation.

Recommendation: The Secretary of the Army should take steps, in collaboration with the Army's private housing partners, to review the indicators underlying the privatized housing project performance metrics to ensure they provide an accurate reflection of the condition and quality of the homes. (Recommendation 2

Agency: Department of Defense: Department of the Army: Office of the Secretary
Status: Open

Comments: The Department of Defense (DOD) concurred with this recommendation. In its August 2020 response, DOD noted that the Secretary of the Army has taken several steps toward addressing this recommendation. For example, the Army published the Portfolio and Asset Management Handbook creating a multi-tiered assessment approach of performance metrics to measure the health of each privatized home through inspection, assessment, satisfaction, and feedback. The Army and the private housing partners revised the Incentive Fee Performance Management Plan, placing increased emphasis on resident satisfaction and work order/maintenance management. The Army also put Commanders in charge, ensuring Army leadership at every Army installation is tracking housing quality and safety. In late 2020, the Army plans to review and evaluate these actions and make a determination by 31 Jan 2021 if any changes or revisions are needed to best implement the recommendation. As such, we will continue to monitor the status of this recommendation.

Recommendation: The Secretary of the Air Force should take steps, in collaboration with the Air Force's private housing partners, to review the indicators underlying the privatized housing project performance metrics to ensure they provide an accurate reflection of the condition and quality of the homes. (Recommendation 3)

Agency: Department of Defense: Department of the Air Force: Office of the Secretary of the Air Force
Status: Open

Comments: The Department of Defense (DOD) concurred with this recommendation. In its August 2020 response, DOD noted that the Air Force is engaging in several steps to address this recommendation. Specifically, in March 2020, the Air Force tasked each of the Military Housing Offices to inspect all move-in, move-out, and change of occupancy maintenance events and all emergency, urgent, and life, health, and safety work orders, which is outlined in Air Force guidance. The Air Force is also engaging in several ongoing actions. In response to a memo to the military departments to provide consistency of performance incentive fees, the Air Force was negotiating with the privatized housing project owners to update performance incentive fee metrics in accordance with ASD directed categories and weightings. As of August 2020, agreements had been finalized with 2 partners and work was ongoing with the remaining partners. In addition, the Air Force was working with the project owners to deploy Satisfacts, a survey tool to independently measure resident satisfaction with projects' work order performance, across all Air Force projects with an expected completion by December 2020. We will continue to monitor the status of these recommendations.

Recommendation: The Secretary of the Navy should take steps, in collaboration with the Navy and Marine Corps' private housing partners, to review the indicators underlying the privatized housing project performance metrics to ensure they provide an accurate reflection of the condition and quality of the homes. (Recommendation 4)

Agency: Department of Defense: Department of the Navy: Office of the Secretary
Status: Open

Comments: The Department of Defense (DOD) concurred with this recommendation. In its August 2020 response, DOD noted that the Navy and Marine Corps are engaging in several steps to address this recommendation. Specifically, the Navy and Marine Corps have developed a centralized electronic data warehouse, which receives data from privatized housing partner maintenance systems to display work order and survey performance dashboards. By February 2021, the Navy expects to complete the development of metrics displayed by the data warehouse to include key service call performance metrics and resident feedback data. The Navy and Marine Corps are also developing a web-based monitoring matrix tool housing officials can use to evaluate the performance of privatized housing partners. The tool is intended to provide improved tracking capabilities and improved accessibility to information, thus providing more consistent oversight and improved advocacy service members and their families. The Navy is also working to hire 247 additional Navy and Marine Corps housing staff to review and analyze private partner provided recurring maintenance and customer satisfaction reports in an effort to strengthen oversight and monitoring, with an estimated completion of September 2020. Moving forward, we will continue to monitor the status of these and other efforts.

Recommendation: The Secretary of Defense should ensure that the Assistant Secretary of Defense for Sustainment, in collaboration with the military departments and private housing partners, establish minimum data requirements and consistent terminology and practices for work order data collection for comparability across installations and projects and to track trends over time. (Recommendation 5)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open

Comments: e Department of Defense (DOD) partially concurred with this recommendation. In its August 2020 response, DOD stated that the Assistant Secretary of Defense for Sustainment (ASD(S)), as the Chief Housing Officer, plans to issue a policy directing the military departments to establish, to the maximum extent practical, minimum data requirements and consistent terminology and practices for MHPI housing unit work order collection to aid in comparability across installations and projects, and for tracking trends over time. However, DOD noted that the department cannot mandate changes to existing MHPI project legal documents. DOD estimates that this effort will be completed by December 2021. We will continue to monitor the status of this recommendation.

Recommendation: The Secretary of Defense should ensure that the Assistant Secretary of Defense for Sustainment require the military departments to establish a process to validate data collected by the private housing partners to better ensure the reliability and validity of work order data and to allow for more effective use of these data for monitoring and tracking purposes. (Recommendation 6)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open

Comments: The Department of Defense (DOD) concurred with this recommendation. In its August 2020 response, DOD noted that the Assistant Secretary of Defense for Sustainment (ASD(S)), as the Chief Housing Officer, issued guidance directing the military departments to exercise proper oversight to ensure Military Housing Privatization Initiative (MHPI) projects perform in accordance with legal agreements, to include due diligence in monitoring and auditing project maintenance records and other project performance data. The guidance also required military departments to review their entire portfolios of MHPI projects to ensure accurate and appropriate work order management processes. In response to the new guidance, DOD noted that the military departments put in place appropriate oversight measures and undertook the required reviews, though the investigations of project business practices were ongoing in some cases. As another step, the ASD(S) plans to issue guidance directing the military departments to establish a process to validate data collected by their respective MHPI Project Owners to better ensure the reliability and validity of work order data and to allow for more effective use of these data for monitoring and tracking purposes. DOD expects this to be completed by the end of September 2020. We will continue to monitor the status of this recommendation.

Recommendation: The Secretary of Defense should ensure the Assistant Secretary of Defense for Sustainment, in collaboration with the military departments, develop a process for collecting and calculating resident satisfaction data from the military departments to ensure that the data are compiled and calculated in a standardized and accurate way. (Recommendation 7)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open

Comments: The Department of Defense (DOD) partially concurred with this recommendation based on the fact that the draft report listed the incorrect office as the source for addressing the deficiency, but subsequently changed its response to concur after the recommendation was directed to the appropriate office in the final report. In its August 2020 response, DOD noted that the Assistant Secretary of Defense for Sustainment (ASD(S)) plans to issue guidance establishing a department-wide process for collecting and calculating resident satisfaction data to ensure that the data are compiled and calculated in a standardized and accurate way effective with the survey collection effort in Fiscal Year 2021. The department expects this effort to be completed by October 2020. We will continue to monitor the status of this recommendation.

Recommendation: The Secretary of Defense should ensure the Assistant Secretary of Defense for Sustainment provides additional explanation of the data collected and reported in future reports to Congress, such as explaining the limitations of available survey data, how resident satisfaction was calculated, and reasons for any missing data, among other things. (Recommendation 8)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open

Comments: The Department of Defense (DOD) partially concurred with this recommendation. In its August 2020 response, DOD noted that the Assistant Secretary of Defense for Sustainment (ASD(S)) would provide additional explanation of the MHPI resident satisfaction data collected and reported in future annual Military Housing Privatization Initiative (MHPI) reports to Congress, effective with the annual report covering fiscal year 2019. DOD noted that the additional information will include, among other things, an explanation of the limitations of available survey data, how resident satisfaction was calculated, and reasons for any missing data. As of August 2020, the annual MHPI report covering fiscal year 2018 was in final coordination and the department noted that the report would addresses a vast majority, but not all, of the requirements identified in our recommendation. DOD noted that the additional information would be provided in the next annual MHPI report. We will continue to monitor the status of this recommendation.

Recommendation: The Secretary of the Army should develop and implement a plan to clearly and systematically communicate to residents the difference between the military housing office and the private partner. At a minimum, these plans should include the Army housing office's roles, responsibilities, locations, and contact information and should ensure that all residents are aware that they can directly contact Army housing office officials. (Recommendation 9)

Agency: Department of Defense: Department of the Army: Office of the Secretary
Status: Open

Comments: The Department of Defense (DOD) concurred with this recommendation. In its response, DOD noted that the Army developed a "Plain Language" briefing as required by the 2020 National Defense Authorization Act that included the Army Housing Office's roles, responsibilities, location, and contact information at each privatized housing project site. DOD noted that the intent of the briefing was to ensure that all residents were aware of their ability to directly contact Army Housing Office and/or the Garrison Commanders. DOD stated that the briefing was disseminated to all of the Military Housing Offices, who are using it in newcomer briefings, and stated that the briefing would be provided to all current residents of privatized military housing, but that measure would not be tracked due to attrition. In addition, DOD noted that Headquarters, Department of the Army was tasking Army Materiel Command to develop a more detailed plan to communicate to residents the difference between the Army Housing Office and the private housing partner. The Army's intent is to not only capture residents upon their arrival at an installation, but making the services of the MHO known over the duration of a resident's time on at installation. We will continue to monitor the status of this recommendation.

Recommendation: The Secretary of the Navy should develop and implement a plan to clearly and systematically communicate to residents the difference between the military housing office and the private partner. At a minimum, these plans should include the Navy housing office's roles, responsibilities, locations, and contact information and should ensure that all residents are aware that they can directly contact Navy housing office officials. (Recommendation 11)

Agency: Department of Defense: Department of the Navy: Office of the Secretary
Status: Open

Comments: The Department of Defense (DOD) concurred with this recommendation. In its August 2020 response, DOD noted that the Navy has taken various steps to address this recommendation, with additional steps planned. For example, the Navy has ensured that each installation has a specific issue resolution process description marketing flyer available, both in hard copy and on the public housing websites, with a reminder that residents can contact both the privatized housing property manager and the Navy housing office with any issues. Moreover, every housing unit has been provided with a refrigerator magnet reminding residents that they can and should contact the Navy housing office if they have any issues with their home. In addition, the Navy and Marine Corps have established a requirement to contact each privatized housing resident not later than 15 days after move-in and again 60 days after move-in to provide an opportunity to request assistance and remind them of available support. Moving forward, the Navy has an ongoing effort to require private housing companies to market the same messaging as the service issue resolution processes for the MHOs that they support, for consistent advocacy messaging to the tenants. The information will be added to PPV partner websites, printed material and resident handbooks. The Navy also plans to use its annual survey to tracks resident satisfaction and awareness of the Navy's issue resolution process, with expected completion by October 2020. In addition, the Marine Corps has identified a near-term initiative to procure name tags for all MHO employees to wear, identifying themselves as distinct and separate from privatized housing property management company, which will be standardized across all USMC installations. The Marine Corps also plans to develop a standard welcome aboard package to include magnets and other items with key point of contact information. The Marine Corps expects these efforts to be completed by the end of September 2020.

Recommendation: The Secretary of Defense should ensure that the Assistant Secretary of Defense for Sustainment, in collaboration with the military departments, assess the risks of proposed initiatives aimed at improving the privatized military housing program on the financial viability of the projects. (Recommendation 12)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open

Comments: The Department of Defense (DOD) concurred with this recommendation. In its August 2020 response, DOD noted that the Assistant Secretary of Defense for Sustainment, as the Chief Housing Officer, planned to issue a policy establishing the assessment of Military Housing Privatization Initiative (MHPI) project financial viability as part of quarterly program reviews as a long-term requirement. The department noted that the program review data would be augmented by input from the MHPI companies, who are assessing the likely impact of proposed initiatives in conjunction with their third party lenders. The department expected this effort to be completed by December 2020. We will continue to monitor the status of this recommendation.

Recommendation: The Director of NIST should establish time frames for completing NIST's initiatives, to include the information security measurement program and the cybersecurity framework starter profile, to enable the identification of sector-wide improvements from using the framework in the protection of critical infrastructure from cyber threats. (Recommendation 1)

Agency: Department of Commerce: National Institute of Standards and Technology: Office of the Director
Status: Open

Comments: In written comments provided in July 2020, the Department of Commerce (Commerce) stated that it agreed with our recommendation. It noted that to further establish its Cybersecurity Measurement program, the National Institute of Standards and Technology (NIST) will document its Cybersecurity Measurement program's scope, objectives, and approach, including an inventory of existing measurement resources. Additionally, to further amplify small business awareness of cybersecurity, and of the Cybersecurity Framework, it noted that NIST will develop and publish two Cybersecurity Framework starter profiles tailored toward risk management of business processes important to small business owners. The expected completion date is September 2020.

Recommendation: The Secretary of Agriculture, in coordination with the Secretary of Health and Human Services, should take steps to consult with respective sector partner(s), such as the SCC, DHS, and NIST, as appropriate, to collect and report sector-wide improvements from use of the framework across its critical infrastructure sector using existing initiatives. (Recommendation 2)

Agency: Department of Agriculture
Status: Open

Comments: In written comments provided in April 2020, the United States Department of Agriculture (USDA) stated that it concurred with our recommendation. The department stated that it routinely shared framework guidance provided by the Department of Homeland Security and discussed the framework as part of its monthly Sector conference calls and biannual Sector Meetings. It also added that the department will continue to strengthen its coordination efforts.

Recommendation: The Secretary of Defense should take steps to consult with respective sector partner(s), such as the SCC, DHS, and NIST, as appropriate, to collect and report sector-wide improvements from use of the framework across its critical infrastructure sector using existing initiatives. (Recommendation 3)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open

Comments: In written comments provided in July 2020, the Department of Defense concurred with our recommendation. The department noted that it had developed processes and resources to help determine the type of framework adoption across the Defense Industrial Base. These include conducting assessments on the implementation of NIST Special Publication (SP) 800-171 , "Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations;" and releasing the Defense Industrial Base Implementation Guide for the NIST Cybersecurity Framework. However, the department has yet to report on sector-wide improvements using these processes and resources. Until it does so, its critical infrastructure sector may not fully understand the value of the framework to better protect its critical infrastructure from cyber threats. The expected completion dates are in September and November 2020.

Recommendation: The Secretary of Energy should take steps to consult with respective sector partner(s), such as the SCC, DHS, and NIST, as appropriate, to collect and report sector-wide improvements from use of the framework across its critical infrastructure sector using existing initiatives. (Recommendation 4)

Agency: Department of Energy: Office of the Secretary
Status: Open

Comments: In written comments provided in February 2020, the Department of Energy (DOE) stated that it partially agreed with our recommendation. It noted that DOE will coordinate with the Energy Sector to develop an understanding of sector-wide improvements from use of the framework. The expected completion date is December 2021.

Recommendation: The Administrator of the Environmental Protection Agency should take steps to consult with respective sector partner(s), such as the SCC, DHS, and NIST, as appropriate, to collect and report sector-wide improvements from use of the framework across its critical infrastructure sector using existing initiatives. (Recommendation 5)

Agency: Environmental Protection Agency
Status: Open

Comments: In written comments provided in July 2020, the Environmental Protection Agency (EPA) stated that it agreed with our recommendation. It noted that it will consult with the Water Sector Coordinating Council, the Department of Homeland Security, and the National Institute of Standards and Technology, as appropriate, to investigate options to collect and report sector-wide improvements, consistent with statutory requirements and the Sector's willingness to participate. However, the department did not provide a timeframe for completing these actions.

Recommendation: The Administrator of the General Services Administration, in coordination with the Secretary of Homeland Security, should take steps to consult with respective sector partner(s), such as the Coordinating Council and NIST, as appropriate, to collect and report sector-wide improvements from use of the framework across its critical infrastructure sector using existing initiatives. (Recommendation 6)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: In April 2020, the General Services Administration (GSA), in coordination with its co-SSA, the Department of Homeland Security (DHS), provided documentation demonstrating that it had initiated steps to collect and report on sector-wide improvements from use of the NIST Cybersecurity Framework across its critical infrastructure sector. Specifically, the agencies from the government sector had submitted their risk management reports to DHS and OMB that described agencies' action plans to implement the framework, as required under Executive Order 13800 and evaluated the agencies against the five functions of the NIST Cybersecurity Framework: Identify, Detect, Protect, Respond, and Recover. The risk management reports are included as part of OMB's FISMA Annual Report to Congress. According to OMB's FISMA Annual Report to Congress, OMB and DHS determined that 71 of 96 agencies (74 percent) have cybersecurity programs that are either at risk or high risk. As a result, improvements were identified in the form of four core actions in the Federal Cybersecurity Risk Determination Report and Action Plan, which include: (1) Implementing the Cyber Threat Framework to increase cybersecurity threat awareness among Federal agencies, (2) Standardize IT and cybersecurity capabilities, (3) Consolidate agency SOCs to improve incident detection and response capabilities, and (4) Drive accountability across agencies through improved governance processes, recurring risk assessments, and OMB's engagements with agency leadership. We are waiting for additional information from GSA and DHS on the status of the four core actions.

Recommendation: The Secretary of Health and Human Services, in coordination with the Secretary of Agriculture, should take steps to consult with respective sector partner(s), such as the SCC, DHS, and NIST, as appropriate, to collect and report sector-wide improvements from use of the framework across its critical infrastructure sector using existing initiatives. (Recommendation 7)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In written comments provided in January 2020, the Department of Health and Human Services (HHS) stated that it concurred with our recommendation. The department noted that it would work with the appropriate entities to refine and communicate best practices to the sector.

Recommendation: The Secretary of Homeland Security should take steps to consult with respective sector partner(s), such as the SCC and NIST, as appropriate, to collect and report sector-wide improvements from use of the framework across its critical infrastructure sectors using existing initiatives. (Recommendation 8)

Agency: Department of Homeland Security: Office of the Secretary
Status: Open

Comments: In written comments provided in February 2020, the Department of Homeland Security (DHS) stated that it agreed with our recommendation. It noted that in coordination with the IT Sector Coordinating Council, the department recently issued a survey to small and mid-sized IT sector partners to better understand framework adoption and use within the IT sector. Once the results of the survey are received, DHS's Cybersecurity and Infrastructure Security Agency will determine the feasibility of issuing similar surveys to other sectors, and the potential timelines for completing sector-specific survey modifications, issuing surveys, compiling responses, and developing white papers on the status of framework adoption for each sector. The department expects completion of this work by December 31, 2021.

Recommendation: The Secretary of Transportation, in coordination with the Secretary of Homeland Security, should take steps to consult with respective sector partner(s) such as the SCC and NIST, as appropriate, to collect and report sector-wide improvements from use of the framework across its critical infrastructure sector using existing initiatives. (Recommendation 9)

Agency: Department of Transportation: Office of the Secretary
Status: Open

Comments: In written comments provided in April 2020, the Department of Transportation (DOT) stated that it concurred with our recommendation. It noted that the department (through the Office of the Secretary, Office of Intelligence, Security, and Emergency Response) and the Department of Homeland Security (through the Transportation Security Administration and United States Coast Guard) will coordinate as Co-Sector-Specific Agencies for the Transportation Systems Sector to finalize the development and distribution of a survey instrument to determine the level and type of framework adoption in the Sector. The department expects completion of this work by December 31, 2021.

Recommendation: The Secretary of the Treasury should take steps to consult with respective sector partner(s), such as the SCC, DHS, and NIST, as appropriate, to collect and report sector-wide improvements from use of the framework across its critical infrastructure sector using existing initiatives. (Recommendation 10)

Agency: Department of the Treasury: Office of the Secretary
Status: Open

Comments: In written comments provided in January 2020, the Department of the Treasury (Treasury) stated that it agreed with our recommendation. The department noted that it will assess using the identified initiatives and their viability for collecting and reporting sector-wide improvements from the use of the NIST Framework. The department did not provide a timeframe for completing these actions.

Recommendation: The Administrator of GSA should coordinate with agencies to ensure that street address information in the public database is complete and correctly formatted. (Recommendation 1)

Agency: General Services Administration
Status: Open
Priority recommendation

Comments: GSA has taken steps to address this recommendation. GSA revised certain data elements' definitions in 2020 and incorporated them into the 2020 FRPP data dictionary to enhance the accuracy and completeness of the data reported to FRPP. In addition, the Federal Real Property Council established a data governance working group that meets regularly to address challenges to reliable and complete data in the FRPP. In September 2020, that group committed to developing an action plan to outline the steps to improve the location information in FRPP that we identified in February 2020. If these efforts succeed, GAO will close this recommendation as implemented.

Recommendation: The Administrator of GSA should coordinate with agencies to review V&V anomaly categories to better target incorrect data. (Recommendation 2)

Agency: General Services Administration
Status: Open

Comments: GSA has taken steps to address this recommendation. The Federal Real Property Council established a data governance working group that meets regularly to address challenges to reliable and complete data in the FRPP. In September 2020, GSA described step that the working group has taken to make V&V anomaly categories better target incorrect data. GSA is currently assessing these actions.

Recommendation: The Administrator of GSA should work in consultation with agencies to determine which, if any, data should be withheld from public release. (Recommendation 3)

Agency: General Services Administration
Status: Open

Comments: GSA staff said that the agency now agrees with this recommendation and in an September 2020 meeting said that GSA staff were working with relevant agencies to address it. GAO will continue to monitor their progress.

Recommendation: The Administrator of GSA should instruct each agency to apply a consistent, risk-based approach in determining which, if any, assets or asset-specific information should be withheld from public release. (Recommendation 4)

Agency: General Services Administration
Status: Open

Comments: GSA agreed with this recommendation and in an September 2020 meeting said that GSA staff were working with relevant agencies to address it. GAO will continue to monitor their progress.

Recommendation: The Administrator of GSA should allow agencies to provide summary data for secure installations. (Recommendation 5)

Agency: General Services Administration
Status: Open

Comments: In April 2020, GAO staff met with GSA and Interagency Security Committee officials. The officials explained that they had had discussions to determine what installations would be considered secure installations and were considering what changes to make to the data. GAO will continue to monitor their actions. In September 2020, GSA confirmed that the Federal Real Property Council was working on the issue.

Recommendation: The Administrator of GSA should link all of GSA's publicly available realproperty data sources. (Recommendation 6)

Agency: General Services Administration
Status: Open

Comments: GSA agreed with this recommendation and in an September 2020 meeting said that GSA staff summarized the actions the agency has taken to link all of the real property data sources. GAO is currently assessing the actions.

Recommendation: The Secretary of Defense should ensure that the Assistant Secretary of Defense for Health Affairs, in coordination with the military departments, collect consistent information on the replacement costs of military physicians and dentists and use this information to inform investment decisions in the package of incentives to recruit and retain military physicians and dentists. (Recommendation 1)

Agency: Department of Defense: Office of the Under Secretary for Personnel and Readiness: Defense Health Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should ensure that the Assistant Secretary of Defense for Health Affairs, in coordination with the military departments, collect consistent information on current and historical retention data, to include data on the percentage of eligible physicians and dentists who accept retention bonuses, and use this information to inform investment decisions in the package of incentives to retain military physicians and dentists. (Recommendation 2)

Agency: Department of Defense: Office of the Under Secretary for Personnel and Readiness: Defense Health Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should ensure that the Assistant Secretary of Defense for Health Affairs, in coordination with the military departments, collect consistent information on private sector civilian wages and use this information to help inform investment decisions in the package of incentives to recruit and retain military physicians and dentists. (Recommendation 3)

Agency: Department of Defense: Office of the Under Secretary for Personnel and Readiness: Defense Health Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of the General Services Administration should expand its outreach as appropriate to obtain feedback from lessors that are representative of its entire lease portfolio. (Recommendation 1)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: GSA agreed with this recommendation. In its 180-day letter to the congressional clients dated March 25, 2020, GSA stated that it would provide additional documentation of invitations to its industry outreach efforts. We will review this information when it is available.

Recommendation: The Administrator of the General Services Administration should, for future outreach efforts, document and assess lessors' feedback about the leasing process. (Recommendation 2)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: GSA agreed with this recommendation. In its 180-day letter to the congressional clients dated March 25, 2020, GSA stated that it would document and assess the feedback received from lessors during its outreach efforts. We will review this information when it is available.

Recommendation: The Administrator of the General Services Administration should evaluate whether the simplified lease model is achieving its intended results. (Recommendation 3)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: GSA agreed with this recommendation. In its 180-day letter to the congressional clients dated March 25, 2020, GSA stated that it would evaluate its simplified lease model and provide documentation of the evaluation's methodology, findings, and recommendations. We will review information related to this evaluation when it is available.

Recommendation: The Administrator of the GSA should report for Congress and the public—for example, on GSA's prospectus website—the extent to which completed projects' construction costs and schedules were rebaselined and final construction costs, to include any additional funding tenant agencies may have provided to GSA for changes. (Recommendation 1)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: The General Services Administration (GSA) partially concurred with this recommendation. On February 6, 2020, GSA stated that it will publish summary schedule and budget results for completed projects on GSA's public-accessible prospectus website. GAO will continue to monitor GSA's actions related to this recommendation and update information accordingly.

Recommendation: The Administrator of the GSA should update its 2005 Commissioning Guide—or replace it with appropriate industry-recognized standards and guidance—to be consistent with GSA's current design standards and industry practices. (Recommendation 2)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: GSA concurred with this recommendation, and on February 6, 2020, stated that GSA will publish updated Commissioning Guidance. GAO will continue to monitor GSA's actions related to this recommendation and update information accordingly.

Recommendation: The Administrator of the GSA should identify and communicate—such as through policy, guidance, or other appropriate mechanism—(a) when and how Post Occupancy Evaluations should be conducted for completed projects considering resource constraints and (b) how recommendations or lessons learned from those evaluations are effectively communicated to future project teams. (Recommendation 3)

Agency: General Services Administration: Office of the Administrator
Status: Open

Comments: GSA concurred with this recommendation, and on February 6, 2020, stated that GSA will publish program guidance on how and when Post Occupancy Evaluations are conducted and communicate recommendations or lessons learned to future project teams. GAO will continue to monitor GSA's actions related to this recommendation and update information accordingly.

Recommendation: The Director of DHA should define data sharing requirements with more specificity in its transition guidance for outgoing and incoming contractors, including the time period covered and the types of data that must be shared. (Recommendation 1)

Agency: Department of Defense: Office of the Under Secretary for Personnel and Readiness: Defense Health Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of DHA should revise the process the agency has in place for resolving issues raised between contractors during transition to ensure such issues are resolved within time frames that will not adversely affect the transition schedule. (Recommendation 2)

Agency: Department of Defense: Office of the Under Secretary for Personnel and Readiness: Defense Health Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of DHA should incorporate lessons learned from this transition and ensure that subject matter experts review PRV/PRAV requirements and performance guarantees prior to the issuance of the request for proposal for the next transition. These requirements should be reviewed to ensure their feasibility and effectiveness for assessing contractor readiness. (Recommendation 3)

Agency: Department of Defense: Office of the Under Secretary for Personnel and Readiness: Defense Health Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The NIST Associate Director for Laboratory Programs should update NIST policy to include periodic comprehensive management review of the agency's measurement services to assess gaps and ensure alignment with stakeholders' needs, and take steps to ensure that the Associate Director completes the review of NIST's standards development activities (Recommendation 1).

Agency: Department of Commerce: National Institute of Standards and Technology
Status: Open

Comments: NIST concurred with this recommendation and, as of May 2020, had taken some steps to implement it. Specifically, NIST provided information indicating it uses multiple information sources to identify potential measurement service gaps. For example, the Associate Director for Laboratory Programs (ADLP) reviews quarterly reports from NIST's laboratory divisions that include information on measurement services. The ADLP may identify measurement service gaps as part of this review. Also, the NIST Measurement Services Council serves the ADLP in an advisory role to identify and address NIST-wide issues related to the quality, relevance, performance, operations, and resources allocated to the health and improvement of NIST measurement services. The Council produces an annual report that addresses the health of NIST's measurement services, including potential changes needed to meet future customer needs. Further, NIST employees may suggest new services through processes established in suborder 5901.01. Many of these efforts also include consideration of potential gaps in NIST's participation in standards development activities. Additionally, NIST Order 5301.00 delegates responsibility to review standards activities and participation across several levels of NIST management. Although these actions may help identify gaps in NIST's participation in standards development activities as well as identify gaps in the measurement services it provides, it is not clear how or whether they fulfill the periodic review of the effectiveness of NIST's participation in documentary standards activities that the ADLP is to conduct under NIST's standards participation policy. We will update our evaluation of NIST's implementation of this recommendation when the agency provides additional information on how the activities described above fulfill the effectiveness review called for by NIST's policy, or provides information documenting that the ADLP has conducted such a review.

Recommendation: The Secretary of Energy should supplement the agency's 2016 long-term strategic review by conducting an additional analysis that takes into account private-sector response, oil market projections, and costs and benefits of a wide range of different SPR sizes. (Recommendation 1)

Agency: Department of Energy
Status: Open

Comments: In May 2018, DOE partially agreed with the recommendation to supplement the 2016 long-term strategic review with an additional analysis that takes into account private-sector response, oil market projections, and costs and benefits of a wide range of different SPR sizes. In September 2018, the agency agreed to conduct two additional studies related to the future size of the SPR. According to DOE, the first study is currently underway and will determine the future configuration of the SPR at the end of all sales currently enacted into law. The SPR post-sale configuration study is expected to be completed by the end of calendar year 2018. DOE is beginning another study designed to assess the purpose, goals, and objectives of the SPR, which would ultimately lead to an optimal size of the SPR. To complete this study, DOE will focus on analyzing future requirements of the SPR rather than analyzing the benefits of various SPR sizes. As of December 2019, according to DOE, the Office of Fossil Energy, Office of Petroleum Reserves, presented a draft of the SPR post-sale configuration study to the Office of Fossil Energy for review. A draft of the requirements study, which assess the purpose, goals, and objectives of the SPR, was also presented to the Office of Fossil Energy for review.

Recommendation: The Secretary of Energy should take actions to ensure that the agency periodically conducts and provides to Congress a strategic review of the SPR that, among other things, takes into account changes in crude oil and petroleum product market conditions and contains additional analysis, such as the costs and benefits of a wide range of different SPR sizes. (Recommendation 2)

Agency: Department of Energy
Status: Open
Priority recommendation

Comments: In May 2018, DOE agreed with the recommendation for periodic strategic reviews of the SPR and providing this information to Congress. In September 2018, DOE stated that a 5-year time interval between reviews is an appropriate timeframe. According to DOE, 5 years is sufficient time to allow current strategic plans to be implemented and assessed; the time period would also allow for adjustments as necessary. Given that the agency completed the SPR Long-Term Strategic Review in 2016 as the first of such strategic plans, the next strategic review of the SPR should be completed by the end of fiscal year 2021, according to DOE in December 2019.

Recommendation: The Secretary of Energy should conduct or complete studies on the costs and benefits of regional petroleum product reserves for all U.S. regions that have been identified as vulnerable to fuel supply disruptions, and the Secretary should report the results to Congress. (Recommendation 3)

Agency: Department of Energy
Status: Open
Priority recommendation

Comments: In May 2018, DOE disagreed with the recommendation to conduct or complete studies on the costs and benefits of regional petroleum product reserves. DOE stated that the agency's position is that government-owned and -operated regional petroleum product reserves are an inefficient and expensive solution to respond to regional fuel supply disruptions. In September 2018 and December 2019, DOE noted that given the inefficient and expensive nature of storing refined petroleum products in above-ground tanks, it would be an inappropriate use of taxpayer funds to conduct any additional studies on the use of federal government owned storage of refined petroleum products. However, the Quadrennial Energy Review of 2015 recommended that similar analyses be completed for other areas deemed by DOE to be vulnerable to fuel supply disruptions. Therefore, we continue to believe that conducting these analyses, as recommended in the Quadrennial Energy Review of 2015, will provide Congress with information needed to make decisions about regional product reserves.

Recommendation: The Secretary of Energy, in completing DOE's ongoing study on the effects of congressionally mandated sales, should consider a full range of options for handling potentially excess assets and, if needed, request congressional authority for the disposition of these assets. (Recommendation 4)

Agency: Department of Energy
Status: Open
Priority recommendation

Comments: DOE agreed with GAO's May 2018 recommendation and has taken steps to implement it. As of December 2019, according to DOE officials, the agency completed its analysis of leasing storage (e.g. excess assets) and is including this analysis in a broader study of the reserve's configuration, which is currently under review. However, DOE has not provided documentation of its analysis or study to GAO. DOE stated that it is having discussions with at least one country that may be interested in leasing storage from the United States to meet its international obligations. In September 2018, the House of Representatives passed H.R. 6511, the Strategic Petroleum Reserve Reform Act, which would provide the Secretary of Energy with the authority to establish a program to lease certain underutilized Strategic Petroleum Reserve storage facilities to the private sector, or a foreign government or its representative, and would require that the Secretary of Energy establish and carry out a pilot program to make available for lease (1) up to 200 million barrels of petroleum products at Strategic Petroleum Reserve storage facilities and (2) related facilities. The bill was not passed by the Senate and had not been reintroduced in the 116th Congress as of February 18, 2020. Without examining a full range of options for handling potentially excess reserve assets, DOE risks missing beneficial ways to modernize the Strategic Petroleum Reserve while saving taxpayer resources.

Recommendation: Congress may wish to consider setting a long-range target for the size and configuration of the SPR that takes into account projections for future oil production, oil consumption, the efficacy of the existing SPR to respond to domestic supply disruptions, and U.S. International Energy Agency obligations. (Matter 1)

Agency: Congress
Status: Open

Comments: On July 18, 2019, S. 2175-Acting on the Annual Duplication Report Act of 2019-was introduced and referred to the Senate, Homeland Security and Governmental Affairs Committee. The bill would require the Secretary of Energy to conduct a review of options for a long-range target for the optimal size and configuration of the Strategic Petroleum Reserve and report to Congress no later than 180 days after enactment of the legislation. The report is to describe the findings of the Department of Energy's review and recommendations for legislation needed to optimize the size and configuration of the reserve. No further action has been taken on this bill in the 116th Congress. Congress setting a long-range target for the size and configuration of the Strategic Petroleum Reserve, as GAO recommended in May 2018, could better position DOE to ensure the efficiency and efficacy of federal funds spent on the reserve.

Recommendation: The Assistant Secretary of Labor for the Employee Benefits Security Administration (EBSA) should clarify whether an Employee Retirement Income Security Act of 1974 plan may incorporate material ESG factors into the investment management for a qualified default investment alternative (QDIA). (Recommendation 1)

Agency: Department of Labor
Status: Open

Comments: DOL neither agreed nor disagreed with this recommendation. On April 23, 2018, while DOL was reviewing our report, the agency issued Field Assistance Bulletin 2018-01 regarding retirement plans' use of ESG factors. While this new bulletin specifically mentions the use of ESG factors in a QDIA and reiterates the conditions under which an investment option may generally be considered a QDIA, it focuses on the use of ESG factors for collateral benefits rather than on cases where ESG factors are considered in investment decisions because they have been determined by fiduciaries to be material to financial performance. For example, the new field assistance bulletin states that the QDIA regulations do not suggest that fiduciaries should select a QDIA based on collateral public policy goals. ESG factors can be used to address material risks, which might otherwise be ignored, and there is interest in considering such factors within a QDIA. The use of ESG factors in this manner can be distinct from pursuing collateral public policy goals. Additional clarification from DOL that explicitly addresses plans' use of financially material ESG factors in investment options designated as a QDIA could enhance the agency's effectiveness in assisting plan fiduciaries with understanding and fulfilling their obligations under ERISA. In June 2019, DOL stated that it would be appropriate to engage with stakeholders before reaching any conclusions about the necessity or appropriateness of issuing further guidance in this area. Additional information about DOL's efforts to engage with stakeholders, including the outcome of such efforts and rationale for any conclusions reached would help determine the effectiveness of the agency's actions.

Recommendation: The Assistant Secretary of Labor for EBSA should provide further information to assist fiduciaries in investment management involving ESG factors, including how to evaluate available options, such as questions to ask or items to consider. (Recommendation 2)

Agency: Department of Labor
Status: Open

Comments: DOL neither agreed nor disagreed with this recommendation. GAO believes that while DOL's new field assistance bulletin provides information on the limitations of using ESG factors for pursuing collateral benefits, additional clarifying information could help sponsors conduct due diligence in considering whether ESG factors are material to an investment's financial performance and, if so, how to address those material risks. DOL's written comments recognize that additional clarification could be appropriate, depending on responses to the new field assistance bulletin from the public. We appreciate the consideration of the need for additional information, particularly as some have noted the new field assistance bulletin could create a chilling effect that leads fiduciaries to avoid considering ESG factors that could address material risks in their investments, to the detriment of plan participants' best interests. In June 2019, DOL stated that it would be appropriate to engage with stakeholders before reaching any conclusions about the necessity or appropriateness of issuing further guidance in this area. DOL further stated that the agency added a new project to the Spring 2019 regulatory agenda related to proxy voting. Additional information about DOL's new project on proxy voting and efforts to engage with stakeholders, including the outcome of such efforts and rationale for any conclusions reached, would help determine the effectiveness of the agency's actions.

Recommendation: The Commissioner of CBP should take steps to evaluate the effectiveness of CBP's IPR enforcement efforts, such as by improving its metrics to track the overall effectiveness of its IPR enforcement efforts, evaluating selected activities to enhance IPR enforcement, and developing a process to assess and share information on port-led initiatives to enhance IPR enforcement (Recommendation 1)

Agency: Department of Homeland Security: United States Customs and Border Protection
Status: Open

Comments: CBP concurred with this recommendation. In September 2018, CBP stated that it had established an IPR working group that meets every 4-6 weeks to implement its Fiscal Year 2018 IPR Strategic Plan and develop priorities and metrics. CBP stated that, in these meetings, headquarters and field personnel share information on the results and effectiveness of local and national port initiatives and develop policies for improving IPR enforcement. Additionally, CBP provided evidence that it has begun efforts to improve its tracking of metrics and evaluation of selected activities to enhance IPR enforcement. For example, CBP provided data for 5 of the 16 measurement indicators included in its IPR Strategic Plan. Additionally, the IPR Strategic Plan includes at least 5 action items to assess or evaluate aspects of CBP's IPR enforcement. As of February 2020, CBP officials indicated they are continuing to work on these efforts. We will continue to monitor their implementation.

Recommendation: The Commissioner of CBP, in consultation with ICE, should assess what, if any, additional information would be beneficial to share with the private sector and, as appropriate, take action to enhance information sharing, where possible, such as by proposing regulatory revisions or requesting additional legal authorities from Congress. (Recommendation 2)

Agency: Department of Homeland Security: United States Customs and Border Protection
Status: Open

Comments: CBP concurred with this recommendation. CBP stated that, in May 2018, it briefed the Senate Finance Committee on six policy goals to improve IPR, import safety, and e-commerce enforcement that require additional legislative authority to implement. In December 2018, CBP stated that it had identified the need to establish an information sharing structure for e-commerce as a first step in implementing its E-Commerce Strategy. CBP officials stated that they would work with offices throughout CBP and with key stakeholders in the trade community and the Commercial Customs Advisory Committee (COAC) to build an information sharing structure and identify the necessary statutory and regulatory changes to implement it. CBP said that, when statutory changes have been identified, it will work through the interagency process to make any necessary Congressional recommendations. In January 2020, the Department of Homeland Security published a report that identified actions to combat trafficking of counterfeit and pirated goods in conjunction with the private sector. These actions included steps to share additional information with the private sector. For example, the report said that when CBP identifies suspected counterfeit merchandise that is destined for a U.S. fulfillment center or warehouse, it will notify the e-commerce platform or other third-party intermediary operating the facility. This will allow the operator of the fulfillment center or warehouse to remove or destroy any identical items from the same seller in coordination with rights holders. The report also recommends the formation of the Anti-Counterfeiting Consortium to Identify Online Nefarious Actors and a framework for sharing information with sellers, shippers, and other third-party intermediaries. If implemented, these steps could help to enhance information sharing with the private sector. GAO continues to monitor the implementation of these actions.

Recommendation: The Secretary of Commerce should direct the NOAA Administrator to develop a strategy for expanding NOAA's use of the private sector in its hydrographic survey program, as required by law.

Agency: Department of Commerce
Status: Open

Comments: In September 2018, NOAA reported that it had awarded a contract to assess hydrographic surveying needs and had drafted a Memorandum of Agreement to improve coordination with the U.S. Geological Survey on data acquisition and management. NOAA also reported that it planned to identify surveying tasks that could be accomplished using the private sector, and would take steps to improve the funding transfer process so that it could take advantage of Federal Emergency Management Agency and National Transportation Safety Board funds available for certain types of private sector survey activities. NOAA officials stated these tasks would be completed and a final strategy on working with the private sector issued by December 30, 2020.

Recommendation: As Congress considers reauthorizing NFIP, it should consider comprehensive reform to improve the program's solvency and enhance the nation's resilience to flood risk, which could include actions in six areas: (1) addressing the current debt, (2) removing existing legislative barriers to FEMA's revising premium rates to reflect the full risk of loss, (3) addressing affordability, (4) increasing consumer participation, (5) removing barriers to private-sector involvement, and (6) protecting NFIP flood resilience efforts. In implementing these reforms, Congress should consider the sequence of the actions and their interaction with each other.

Agency: Congress
Status: Open

Comments: As of July 2020, Congress has not passed comprehensive reform of NFIP, but Congress is considering various reforms as it works to reauthorize the program. We will review the status of this item if and when such legislation passes.

Recommendation: In the event that Congress again requires an agency to provide affected individuals with identity theft insurance in response to a breach of sensitive personal data, Congress should consider permitting the agency to determine the appropriate level of that insurance.

Agency: Congress
Status: Open

Comments: As of July 2020, Congress had not enacted legislation for which our Matter for Congressional Consideration would be applicable.

Recommendation: The Director of the Office of Management and Budget should, to the extent feasible, conduct an analysis of the effectiveness of the various identity theft services relative to alternatives, and revise OMB's guidance to federal agencies in light of this analysis.

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: As we reported in GAO-19-230, we contacted OMB several times between May 2018 and early March 2019 to update the status of this recommendation, and again in July 2020, but as of July 2020, OMB had not responded with an update.

Recommendation: The Director of the Office of Management and Budget should explore options to address the risk of duplication in federal agencies' provision of identity theft services in response to data breaches, and take action if viable options are identified.

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: No executive action identified. As of July 2020, OMB had not responded to GAO's request for an update.

Recommendation: To help the Air Force in its effort to address UAS pilot shortfalls, and to help ensure that the Air Force strategies to address UAS pilot shortages are tailored to address remaining issues, such as the significant amount of pilots who are temporarily assigned to the UAS pilot career, the limited amount of cadet interest in the UAS pilot career, and the workload of UAS pilots, the Secretary of Defense should direct the Secretary of the Air Force to revise the Get Well Plan to address these issues.

Agency: Department of Defense
Status: Open

Comments: Although the Air Force has taken some steps to address issues such as the use of pilots temporarily assigned to the UAS pilot career and has accelerated its efforts to increase recruit interest in this particular field, high operational tempo, manning shortages and increased workload among UAS pilots still exist. As noted earlier, in July 2018, the Air Force established a new office within its headquarters a focal point for overseeing RPA personnel matters throughout the Air Force and it established a career field manager (CFM) specifically for RPA personnel, placing the career field on par with manned aircraft pilot career fields. These latest efforts show that the Air Force is taking actions to address challenges to the RPA community beyond the stated goals of the Get Well Plan that we identified and on an enterprise-wide level. Because the Air Force efforts are newly instituted and it remains to be seen how UAS aircrew workloads will be affected, we believe that as of November 2019 this recommendation should remain open until more progress is made.

Recommendation: To help the Air Force in its effort to address UAS pilot shortfalls, and to help the Air Force ensure that its strategies are having the intended effects, the Secretary of Defense should direct the Secretary of the Air Force to monitor the extent to which that achieving the human capital goals in its strategy helps the Air Force achieve its programmatic goals.

Agency: Department of Defense
Status: Open

Comments: DOD partially concurred with this recommendation. According to headquarters Air Force officials, the Air Force has three program goals that are related to addressing UAS pilot shortfalls: to (1) meet combat demand, (2) staff enough personnel to UAS units to allow UAS pilots time to train and take part in development activities, and (3) provide surge UAS combat capabilities when needed. As of September 2019, the Air Force does not have enough personnel in UAS units to allow UAS pilots time to train and take part in developmental activities-known as being in "dwell." As of November 2019, Air Force officials state that they are able to "meet combat demand" but are not able to provide enough manpower to "surge UAS combat capabilities when needed." Therefore, we believe this recommendation should remain open.

Recommendation: To help the Air Force in its effort to address UAS pilot shortfalls, and to help the Air Force ensure that it is poised to meet future needs for UAS pilots, the Secretary of Defense should direct the Secretary of the Air Force to explore the potential use of additional flexibilities that would enable it to increase the number of UAS pilots in its workforce.

Agency: Department of Defense
Status: Open

Comments: DOD partially concurred with this recommendation. In a March 2018 report to Congress, the Air Force stated it had developed a deliberate plan to integrate enlisted pilots in the RQ-4 Global Hawk UAS as it provided the ideal environment to expand mission flexibility. Further, as another way to build capability in support of human capital strategies by using flexibilities, an Air Force selection board met in July 2017 to consider total force officer as well as civilian candidates for various test pilot positions to include test UAS pilots. Finally, the Air Force is seeking legislative changes to allow the Air Reserve Component to perform full time, 24/7, 365 operational missions such as the UAS mission, in Active Guard Reserve status. Additionally, in July 2018, Air Force is in the process of establishing a new division to be the Headquarters focal point for overseeing RPA personnel matters throughout the Air Force and they also stated the Air Force established a career field manager (CFM) specifically for RPA personnel, placing the career field on par with manned aircraft pilot career fields. Further, the Air Force is working on an initiative that would enable it to provide UAS pilots with "dwell time"-a time during which servicemembers are at their home station during which they are able to take leave, attend training, and recuperate. As of November 2019, the Air Force had not implemented this initiative. Additionally, the Air Force has increased the maximum annual retention pay for UAS pilots (and all other pilots) to $35,000. While the Air Force has taken some steps, it is too early to tell whether these steps will result in effective workforce planning outcomes that reduce Air Force UAS pilot shortages. Therefore, we believe that this recommendation should remain open until more progress is made.

Recommendation: To help the Army in its effort to address UAS unit training shortfalls, and to help the Army identify challenges that UAS pilots face in completing their training, the Secretary of Defense should direct the Secretary of the Army to collect feedback from UAS pilots in UAS units, such as by surveying, or conducting focus groups with them.

Agency: Department of Defense
Status: Open

Comments: DOD partially concurred with this recommendation. In its initial comments, DOD stated that incorporating feedback from the field is already an element of the Army's strategy for improving the sustainability, maturity, and health of its UAS workforce. DOD stated that our findings will reinforce the importance of using feedback to improve and refine the Army's overall strategy. In September 2019, Army Headquarters officials reiterated previous statements that they made that the Army has multiple agencies and systems that gather feedback to refine and improve UAS programs. However, the Army has not collected feedback from UAS pilots in UAS units via surveys, focus groups, to help the Army identify challenges that UAS pilots face in completing their training.

Recommendation: To help the Army in its effort to address UAS unit training shortfalls, and to help the Army identify challenges that UAS pilots face in completing their training, the Secretary of Defense should direct the Secretary of the Army to incorporate such feedback into the Army's strategy to address UAS training shortfalls.

Agency: Department of Defense
Status: Open

Comments: DOD partially concurred with this recommendation, and in its initial comments, DOD stated that incorporating feedback from the field is already an element of the Army's strategy for improving the sustainability, maturity, and health of its UAS workforce. DOD stated that our findings will reinforce the importance of using feedback to improve and refine the Army's overall strategy. In July 2018, Army Headquarters officials stated that the Army has multiple agencies and systems that gather feedback to incorporate and improve UAS programs. The officials listed a number of the systems in place to gather feedback on UAS units. However, the Army did not describe any efforts to collect feedback from UAS pilots in UAS units such as by surveying them or conducting focus groups with them. In September 2019, Army officials reiterated their 2018 comments and stated that Army has a number of the systems in place to gather feedback on UAS units. However, the Army has not collected feedback from UAS pilots in UAS units such as by surveying them or conducting focus groups with them and incorporated such feedback into an Army strategy to address UAS training shortfalls.

Recommendation: To help the Army in its effort to address UAS unit training shortfalls, and to help ensure that Army Shadow units meet minimum training requirements, the Secretary of Defense should direct the Secretary of the Army to revise its strategy to address UAS training shortfalls to ensure that it is fully tailored to address training issues and address factors such as lack of adequate facilities, lack of access to airspace, and the inability to fly more than one UAS at a time.

Agency: Department of Defense
Status: Open

Comments: DOD partially concurred with our recommendation that the Army revise its strategy to address UAS training shortfalls to ensure that it is fully tailored to address training issues and address factors such as lack of adequate facilities, lack of access to airspace, and the inability to fly more than one UAS at a time. DOD stated that the Army has already taken steps to continuously improve its training strategy and that our findings will underline the importance of those initiatives, but that additional direction related to our recommendation is not necessary. In their July 2018 written update, Army officials responded to this recommendation by discussing a regulation regarding readiness reporting; however, the response did not clarify how the regulation might address our recommendation. As of November 2019, the Army has not issued an updated UAS strategy that addresses UAS training shortfalls including a lack of adequate facilities, lack of access to airspace, and the inability to fly more than one UAS at a time.

Recommendation: To help the Army in its effort to address UAS unit training shortfalls, and to help the Army ensure that it is basing its decisions to select individuals for UAS pilot training on sound evidence and to help it take advantage of the key benefits associated with effective personnel selection that could include reducing training costs, improving job performance, improving retention of qualified personnel, enabling leadership development, and enhancing organizational effectiveness, the Secretary of Defense should direct the Secretary of the Army to validate that the Armed Services Vocational Aptitude Battery is an effective predictor of UAS pilot candidate performance in UAS pilot training and job performance.

Agency: Department of Defense
Status: Open

Comments: DOD partially concurred with our recommendation that the Army validate that the Armed Services Vocational Aptitude Battery is an effective predictor of UAS pilot candidate performance in UAS pilot training and job performance. DOD stated that it believes that the current graduation rate of soldiers from its UAS pilot school of 98 percent is an indication that the existing personnel resource predictors and practices are sufficient. It also stated that periodic re-validation is prudent, but specific direction to do so is not necessary. In its July 2018 written update about this recommendation, Army officials stated that the successful graduation rate from UAS Advanced Individual Training and suggested that this graduation rate may indicate that the existing Army approach is adequate. As we stated in our report, Army officials told us that senior Army leaders pressure officials at the Army UAS pilot schoolhouse to ensure that UAS pilot candidates make it through training. As a result, graduation rates may not provide the Army with reliable evidence that its approach to selecting personnel to serve as UAS pilots is providing the Army with personnel who have the aptitude for this career. Validating that the Armed Services Vocational Aptitude Battery is an effective predictor of training and job performance of UAS pilot is an important step that would help the Army ensure that it is basing its decisions to select individuals for the UAS pilot career field on sound evidence. As of November 2019, the Army continued to maintain that the successful graduation rate from UAS Advanced Individual Training and suggests that the existing Army approach is adequate.

Recommendation: To help the Army in its effort to address UAS unit training shortfalls, and to help the Army ensure that it is basing its decisions to select individuals for UAS pilot training on sound evidence and to help it take advantage of the key benefits associated with effective personnel selection that could include reducing training costs, improving job performance, improving retention of qualified personnel, enabling leadership development, and enhancing organizational effectiveness, the Secretary of Defense should direct the Secretary of the Army to assess existing research that has been performed that identifies UAS pilot competencies.

Agency: Department of Defense
Status: Open

Comments: DOD partially concurred with our recommendations that the Army assess existing research that has been performed that identifies UAS pilot competencies. In its comments, DOD stated that incorporating findings regarding UAS pilot competencies is already an integral part of both workforce and community management and that effective and efficient resource management, as well as force shaping and management processes, will help ensure that the Army's selection of candidates is consistent with the findings of existing research in this area. DOD stated that it does not believe it is necessary to provide additional direction or guidance to the Army to leverage existing research that identifies UAS pilot competencies. In it's July 2018 written update about this recommendation, Army officials indicated that the Army will assess existing research on UAS operator competencies to improve UAS operator selection. As of November 2019, the Army continued to express interest in assessing existing research on UAS operator competencies to improve UAS operator candidate selection.

Recommendation: To help the Army in its effort to address UAS unit training shortfalls, and to help the Army ensure that it is basing its decisions to select individuals for UAS pilot training on sound evidence and to help it take advantage of the key benefits associated with effective personnel selection that could include reducing training costs, improving job performance, improving retention of qualified personnel, enabling leadership development, and enhancing organizational effectiveness, the Secretary of Defense should direct the Secretary of the Army to incorporate relevant findings from such research into the Army's approach for selecting UAS pilot candidates, as appropriate.

Agency: Department of Defense
Status: Open

Comments: DOD partially concurred with our recommendations that the Army incorporate relevant findings from such research into the Army's approach for selecting UAS pilot candidates, as appropriate. DOD stated that incorporating findings regarding UAS pilot competencies is already an integral part of both workforce and community management and that effective and efficient resource management, as well as force shaping and management processes, will help ensure that the Army's selection of candidates is consistent with the findings of existing research in this area. DOD stated that it does not believe it is necessary to provide additional direction or guidance to the Army to leverage existing research that identifies UAS pilot competencies. In its July 2018 written update on this recommendation, Army officials indicated that the Army will consider a cost benefit analysis on techniques that would potentially improve a process, product, or result related to selecting UAS pilot candidates. Officials went on to state that once the assessment is complete, the Army will incorporate relevant findings into the approach for selecting UAS pilot candidates. As of November 2019, the Army expressed interest in incorporating findings from relevant research into processes for selecting UAS pilot candidates.

Recommendation: To ensure that all relevant U.S. agencies have information on the effect of changes in U.S. policy related to Cuba, the Secretary of State, in consultation with the Department of Commerce, Department of the Treasury, U.S. Department of Agriculture, and other relevant agencies, should take steps to identify and begin to collect the information that would allow them to monitor changes in economic engagement, including with the Cuban private sector.

Agency: Department of State
Status: Open

Comments: State concurred with this recommendation. In April 2017, State reported that it was taking steps to identify and collect information that would enable it to monitor the Cuban economy and changes in the economic environment, including with the Cuban private sector. For example, State noted that Embassy Havana had developed a plan for in-country travel and reporting by identifying key sectors and provinces that could provide additional insights on the Cuban economy. As of July 2017, State reported that the U.S. government had paused most bilateral engagement with the Cuban government while the incoming presidential administration conducted an interagency policy review. However, State noted that during this time the U.S. embassy in Havana produced several analytic cables discussing developments in the Cuban economy. With the release of the administration's National Security Presidential Memorandum "Strengthening the Policy of the United States Toward Cuba" in June 2017, State reported that it would work to implement this policy and would monitor developments in U.S. engagement with the private sector and Cuban economic trends. As of November 2017, State said that it was consulting with interagency partners on developments impacting the Cuban private sector and that it was working with other U.S. agencies to determine how to most effectively redirect resources away from the Cuban government and towards the private sector as called for in the administration's Cuba policy. However, State also noted that operations at Embassy Havana had been significantly affected by Hurricane Irma and the health attacks against U.S. diplomats in Cuba. According to State, the Secretary of State's September 2017 order for all non-emergency U.S. personnel to depart Cuba had limited the ability of Embassy Havana to report on developments there, but that the department would continue to monitor and report on Cuba's private sector to the greatest extent possible and as resources permitted. As of November 2019, State had shared with GAO reporting it had conducted related to Cuba's economy. GAO is in the process of reviewing this documentation and will be making a final decision about whether State has taken sufficient steps to implement GAO's recommendation.

Recommendation: As part of its lease reform efforts and to increase possible cost savings, the GSA Administrator should seek to reduce leasing costs for federal agencies by allowing tenant agencies the option of choosing non-cancelable occupancy agreements with lower administrative costs, particularly for leases with firm terms of 5 years or less.

Agency: General Services Administration
Status: Open

Comments: In November 2018, GSA officials said that they were unlikely to implement this recommendation because it would shift costs from the tenants to GSA but not reduce overall costs. GAO continues to believe that reducing unnecessary costs to tenant agencies would reduce overall leasing costs by encouraging GSA to be more efficient.

Recommendation: To help federal, state, local, and private sector decision makers access and use the best available climate information, the Executive Office of the President should designate a federal entity to develop and periodically update a set of authoritative climate change observations and projections for use in federal decision making, which state, local, and private sector decision makers could also access to obtain the best available climate information.

Agency: Executive Office of the President
Status: Open

Comments: As of January 2020, the Executive Office of the President has yet to take action in response to this recommendation.

Recommendation: To help federal, state, local, and private sector decision makers access and use the best available climate information, the Executive Office of the President should designate a federal entity to create a national climate information system with defined roles for federal agencies and nonfederal entities with existing statutory authority.

Agency: Executive Office of the President
Status: Open

Comments: As of January 2020, the Executive Office of the President has yet to take action in response to this recommendation.

Recommendation: To ensure that NCUA has adequate authority to determine the safety and soundness of credit unions, Congress should consider modifying the Federal Credit Union Act to grant NCUA authority to examine technology service providers of credit unions.

Agency: Congress
Status: Open

Comments: In July 2015, we suggested that Congress modify the Federal Credit Union Act to grant NCUA authority to examine technology service providers of credit unions. As of July 2020, Congress had not granted NCUA this authority.

Recommendation: To increase coordination between various levels of government and reduce duplication of effort, resources, and costs associated with collecting and maintaining accurate address data, Congress should consider assessing the impact of the disclosure restrictions of Section 9 of Title 13 and Section 412 of Title 39 of the U.S. Code in moving toward a national geospatial address database. If warranted, Congress should consider revising those statutes to authorize the limited release of addresses, without any personally identifiable information, specifically for geospatial purposes. Such a change, if deemed appropriate, could potentially result in significant savings across federal, state, and local governments.

Agency: Congress
Status: Open

Comments: No legislative action had been identified as of December 2019. Addressing this action, which GAO suggested in February 2015, could increase coordination between various levels of government and reduce duplication of effort, resources, and costs associated with collecting and maintaining accurate address data.

Recommendation: To promote forward-looking construction and rebuilding efforts while FEMA phases out most subsidies, the Secretary of the Department of Homeland Security should direct FEMA to consider amending NFIP minimum standards for floodplain management to incorporate, as appropriate, forward-looking standards, similar to the minimum standard adopted by the Hurricane Sandy Rebuilding Task Force.

Agency: Department of Homeland Security
Status: Open

Comments: In August 2019, a FEMA official stated that FEMA intends to implement the recommendation in full eventually, but it is unlikely that it will happen as a cohesive effort in 2020, given other ongoing flood insurance reforms. As of August 2020, the status of this recommendation remains unchanged.

Recommendation: Congress should consider strengthening the current consumer privacy framework to reflect the effects of changes in technology and the marketplace--particularly in relation to consumer data used for marketing purposes--while also ensuring that any limitations on data collection and sharing do not unduly inhibit the economic and other benefits to industry and consumers that data sharing can accord. Among the issues that should be considered are: (1) the adequacy of consumers' ability to access, correct, and control their personal information in circumstances beyond those currently accorded under FCRA; (2) whether there should be additional controls on the types of personal or sensitive information that may or may not be collected and shared; (3) changes needed, if any, in the permitted sources and methods for data collection; and (4) privacy controls related to new technologies, such as web tracking and mobile devices.

Agency: Congress
Status: Open

Comments: As of July 2020, Congress has not taken action on this matter.

Recommendation: To better ensure that CBP's Office of Field Operations' (OFO) staffing processes are transparent and to help ensure CBP can demonstrate that these resource decisions have effectively addressed CBP's mission needs, the Commissioner of CBP should document the methodology and process OFO uses to allocate staff to land ports of entry on the southwest border, including the rationales and factors considered in making these decisions.

Agency: Department of Homeland Security: United States Customs and Border Protection
Status: Open

Comments: In May 2017, CBP's Office of Field Operations began working with a contractor to develop a comprehensive CBP position allocation methodology and tool. According to CBP officials, the purpose of this tool was to ensure a data driven, transparent process for allocating CBP resources--including staff--to land ports of entry on the southwest border. CBP officials stated that the contractor completed the tool in January 2018, CBP tested the tool in fiscal year 2018, and CBP planned to implement the tool in fiscal year 2019. However, CBP officials told us in September 2020 that a subsequent reorganization of the Office of Field Operations rendered the tool unusable without further modification. As a result, they used a manual method to allocate staff in fiscal year 2020 and plan to do the same in fiscal year 2021. As of September 2020, CBP officials planned to document the methodology and process they are now using to allocate staff to land ports of entry, including rationales and factors considered, by November 2020. This recommendation remains open.

Recommendation: Until such time that DOD is able to accurately project contractor FTE estimates it presents in budget submissions using the inventories and required reviews, the Secretary of Defense should direct the Under Secretary of Defense (Comptroller) to include an explanation in annual budget exhibits of the methodology used to project contractor FTE estimates and any limitations of that methodology or the underlying information to which the methodology is applied.

Agency: Department of Defense
Status: Open

Comments: DOD partially concurred with this recommendation and stated in its agency comments that it will strengthen the annual guidance as improvements are made in the inventory of contracted services. Further, DOD stated that if a component's methodology deviates from the process defined in the annual guidance, a footnote explaining the deviation will be included in the contracted services section of the Operation and Maintenance Overview book within the budget. The department could not provide any evidence of steps taken in response to this recommendation, as such we consider this recommendation to be open.

Recommendation: To more effectively implement SBA's expansion of OIT field staff as required by the SBJA, the Administrator of the SBA should update SBA's plan for additional OIT staff to include funding sources and time frames, as well as possible efficiencies from clearly defining roles and responsibilities and leveraging other entities' export assistance resources.

Agency: Small Business Administration
Status: Open
Priority recommendation

Comments: SBA concurred with our recommendations. In response to the Small Business Jobs Act of 2010 (SBJA) requirement that a total of 30 export finance specialists be hired nationwide by September 2012, SBA noted resource constraints and filled only 19 positions at that time. In 2016, SBA reported progress toward the SBJA requirement despite agency staffing limitations and staffed a total of 21 or 70% of the 30 required export finance specialist (EFS) positions. SBA officials also reported that they had hired staff to replace retirements or other staff departures, but determined that because of finite funding resources it would not be feasible to hire additional OIT staff. They instead took steps to mitigate the shortfall by engaging other field office staff to more proactively market its international trade programs to small businesses. In particular, in 2017, as part a result of the new Administrations' Agency Reform plan, SBA undertook a Field Alignment Project. Specific to OIT, this project was intended to better leverage certain District office field staff such that they would increase outreach efforts to promote exports as required by the SBJA and in response to GAO's recommendations. This was done by assigning district staff new specific output goals intended to increase export promotion activities. In January 2020, OIT reported hiring four additional export finance specialists, bringing the total hired to 25. OIT also reported establishing a strategy for future hires to be assigned to existing Export Assistance Centers, and requesting fiscal year 2021 funding to hire individuals to fill the remaining five positions. While these steps partially mitigate the shortfall and are in the spirit of the SBJA requirement and GAO's recommendations, as of January 2020 SBA has not yet achieved the 30 export finance specialists required by the SBJA.