Reports & Testimonies

  1. Share with Facebook 
  2. Share with Twitter 
  3. Share with LinkedIn 
  4. Share with mail 

Recommendations Database

GAO’s recommendations database contains report recommendations that still need to be addressed. GAO’s priority recommendations are those that we believe warrant priority attention. We sent letters to the heads of key departments and agencies, urging them to continue focusing on these issues. Below you can search only priority recommendations, or search all recommendations.

Our recommendations help congressional and agency leaders prepare for appropriations and oversight activities, as well as help improve government operations. Moreover, when implemented, some of our priority recommendations can save large amounts of money, help Congress make decisions on major issues, and substantially improve or transform major government programs or agencies, among other benefits.

As of October 25, 2020, there are 4812 open recommendations, of which 473 are priority recommendations. Recommendations remain open until they are designated as Closed-implemented or Closed-not implemented.

Browse or Search Open Recommendations

Search


Have a Question about a Recommendation?

  • For questions about a specific recommendation, contact the person or office listed with the recommendation.
  • For general information about recommendations, contact GAO's Audit Policy and Quality Assurance office at (202) 512-6100 or apqa@gao.gov.

« Back to Results List Sort by   

Results:

Subject Term: "Project planning"

5 publications with a total of 12 open recommendations
Download these results in CSV format or XLSX format.
Office of Congressional Workplace Rights: Weaknesses in Cybersecurity Management and Oversight Need to Be Addressed
GAO-20-199, Feb 11, 2020
Director: Nick Marinos
Phone: (202) 512-9342

5 open recommendations
Display
Recommendation: The Executive Director should ensure the development and implementation of policies and procedures for incorporating key cybersecurity activities into IT project planning, including scheduling, requirements management, and risk management. (Recommendation 1)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: In January 2020, OCWR noted that it was in the process of revising its IT systems project planning to ensure the development and implementation of policies and procedure incorporating key cybersecurity activities. The agency also stated that it plans to hire an IT Security Project Manager in order to acquire the necessary cybersecurity expertise needed to implement this recommendation and to ensure that sufficient time and resources can be dedicated to the development and implementation of these policies and procedures. We will continue to monitor OCWR's progress in addressing this recommendation.
Recommendation: The Executive Director should ensure the development and implementation of oversight procedures for each externally-operated system that include (1) establishing security and privacy requirements, (2) planning the assessment of security controls, (3) conducting the assessment, and, (4) reviewing the assessment. (Recommendation 2)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: In January 2020, OCWR noted that it was beginning to plan for developing and implementing oversight procedures for each externally-operated system. We will continue to monitor OCWR's progress in addressing this recommendation.
Recommendation: The Executive Director should ensure the establishment of roles and responsibilities for a risk executive function. (Recommendation 3)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: In January 2020, OCWR noted that it had expanded the office's IT Director's role to formally include the functions of an IT Risk Executive and was in the process of establishing the roles and responsibilities. We will continue to monitor OCWR's progress in addressing this recommendation.
Recommendation: The Executive Director should ensure the development and implementation of a cybersecurity risk management strategy. (Recommendation 4)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: In January 2020, OCWR noted that it was beginning to plan for developing and implementing a cybersecurity risk management strategy. We will continue to monitor OCWR's progress in addressing this recommendation.
Recommendation: The Executive Director should ensure commitment to a time frame for developing and implementing policies and procedures for managing cybersecurity risk. (Recommendation 5)

Agency: Office of Congressional Workplace Rights
Status: Open

Comments: In January 2020, OCWR noted that, once the position of IT Security Project Manager is filled and the IT Risk Executive functions are formalized, the agency is planning to commit to a time frame for developing and implementing policies and procedures for managing cybersecurity risk. We will continue to monitor OCWR's progress in addressing this recommendation
Infrastructure Projects: Actions Needed to Fully Develop Performance Schedules for Environmental Reviews
GAO-20-19, Oct 29, 2019
Director: Susan Fleming
Phone: (202) 512-4431

1 open recommendations
Display
Recommendation: The Executive Director of the Permitting Council should incorporate selected best practices we have identified (maintaining the baseline schedule and conducting a risk analysis) into the Permitting Council's process for developing performance schedules for the infrastructure sectors covered under FAST-41. (Recommendation 1)

Agency: Federal Permitting Improvement Steering Council
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.
VA Construction: Management of Minor Construction and Non-Recurring Maintenance Programs Could Be Improved
GAO-18-479, Jul 31, 2018
Director: Andrew Von Ah
Phone: (202) 512-2834

3 open recommendations
Display
Recommendation: The Under Secretary for Health should work with the Department of Veterans Affairs (VA's) Office of Construction and Facilities Management to ensure that VHA incorporates the 12 steps in the GAO Cost Estimating and Assessment Guide in VHA's updated construction projects' cost-estimating guidance. (Recommendation 1)

Agency: Department of Veterans Affairs: Veterans Health Administration
Status: Open

Comments: The Office of Capital Asset Management Engineering and Support (OCAMES) is working with the Office of Construction and Facility Management (OCFM) to make necessary updates to CFM's Cost Estimating and Assessment Guide. GAO has reviewed VA's revisions and found that while they incorporated information on two of the 12 steps in GAO's Cost Estimating and Assessment Guide, the guidance currently meets or substantially meets only 4 of the 12 steps. GAO met with OCFM and OCAMES staff in April 2020 to further discuss our guidance and how to apply it. The VA staff will consider how to further apply our guidance.
Recommendation: The Under Secretary for Health should obtain information on cost increases, schedule delays, and reasons for contract modifications in its updated Capital Asset Database through requiring medical center staff to provide the information or another appropriate method. (Recommendation 5)

Agency: Department of Veterans Affairs: Veterans Health Administration
Status: Open

Comments: OCAMES is finalizing updates and fixing issues related to improvements to the Capital Asset Database; these updates include additional information related to change orders. Due to unexpected challenges with data connections and issues; however, these improvements have not yet been completed. The change in completion date is caused by data connection issues and progress on the overall system was stalled. GAO will continue to monitor VA's progress in implementing this recommendation.
Recommendation: The Under Secretary for Health should develop a comprehensive plan that includes elements such as milestones and roles and responsibilities for updating VHA's Capital Asset Database. (Recommendation 6)

Agency: Department of Veterans Affairs: Veterans Health Administration
Status: Open

Comments: OCAMES is still finalizing updates and fixing issues related to improvements to the Capital Asset Database. Until the updates have been finalized, roles and responsibilities cannot be created. Upon completion of updates, roles and responsibilities will be developed.
Nuclear Regulatory Commission: Additional Action Needed to Improve Process for Billing Licensees
GAO-18-318, Mar 8, 2018
Director: Frank Rusco
Phone: (202) 512-3841

2 open recommendations
Display
Recommendation: The Chief Financial Officer of NRC should formally communicate to all licensees that supplemental billing information--including biweekly reports and monthly status reports on contractor charges--is available and how to request it. Formal communication that would reach all licensees could include adding information to their quarterly invoices. (Recommendation 1)

Agency: Nuclear Regulatory Commission
Status: Open

Comments: According to officials, NRC plans to provide licensees with access to biweekly reports in the summer 2020, with an enhancement to the eBilling system expected in May 2020 and communicating to licensees about the availability of the information in July 2020. Additionally, NRC developed a form for licensees to request additional information on contractor charges on their bill and notified licensees that they may request additional information on contractor charges by submitting this form to NRC.
Recommendation: In developing the project plan for electronic billing, the Chief Financial Officer of NRC should include steps to assess the results of implementing electronic billing, which includes comparing the actual performance to intended outcomes. (Recommendation 5)

Agency: Nuclear Regulatory Commission
Status: Open

Comments: According to NRC, about 10 percent of licensees are currently participating in eBilling. We requested information on how NRC plans to assess the results of eBilling. We will update the status of this recommendation when we receive additional information.
IRS Return Selection: Improved Planning, Internal Controls, and Data Would Enhance Large Business Division Efforts to Implement New Compliance Approach
GAO-17-324, Mar 28, 2017
Director: James R. McTigue Jr.
Phone: (202) 512-9110

1 open recommendations
Display
Recommendation: To further ensure that the new campaigns under LB&I's new approach for addressing tax compliance are implemented successfully, the Commissioner should document lessons learned from stakeholder input and past performance.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of February 2020, IRS officials said LB&I has developed and deployed the Campaign Development Form and the LB&I Taxpayer Registry to capture stakeholder input and feedback. The form documents all actions and a decision made on a particular campaign and is used to monitor real-time performance. While this will help IRS document lessons learned moving forward, IRS officials have not said how they would document lessons learned in the past.