Recommendation: The Secretary of State, in consultation with the Administrator of USAID, should develop performance indicators that would enable State to assess progress toward the strategic objectives and goal of the U.S. conflict minerals strategy going forward. (Recommendation 1)

Agency: Department of State
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of FDA should, as part of the agency's efforts to update OLS's strategic plan for overseeing agency-wide laboratory safety, resolve agency-wide disagreements on the roles and responsibilities for the centers and OLS in implementing laboratory safety reforms. (Recommendation 1)

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of FDA should, as part of the agency's efforts to update OLS's strategic plan for overseeing agency-wide laboratory safety, address issues of duplication, overlap, and fragmentation within the safety program. (Recommendation 2)

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of FDA should, as part of the agency's efforts to update OLS's strategic plan for overseeing agency-wide laboratory safety, identify how FDA leadership will communicate agency-wide on a sustained basis about the importance of laboratory safety and OLS's role in ensuring successful implementation of laboratory safety reforms. (Recommendation 3)

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of FDA should provide OLS—as FDA's laboratory oversight body—with the necessary oversight authority and access to laboratories to oversee FDA's laboratory safety program and ensure compliance with the agency's laboratory safety policies. (Recommendation 4)

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of FDA should take steps to assess and mitigate any risks to independence posed by funding OLS—as FDA's laboratory safety oversight body—through the working capital fund. In conducting its risk assessment, FDA should specifically focus on ensuring the decision-making processes of the working capital fund supports OLS's independence and ability to hire sufficient staff to implement its laboratory safety oversight priorities. (Recommendation 5)

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Council should further clarify and document its roles and responsibilities with regard to USICH matters requiring the Council's approval, the role of the Council Chair, and actions within the Executive Director's delegated authority. (Recommendation 1)

Agency: United States Interagency Council on Homelessness
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Assistant Secretary for Research and Technology should take steps, such as updating guidance or other written communication, to ensure that the topical-research working groups (1) define and monitor progress toward achieving long-term outcomes, and (2) regularly update and monitor their charters and other written agreements to reflect these outcomes, in line with leading practices. (Recommendation 1)

Agency: Department of Transportation: Office of the Assistant Secretary for Research and Technology
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Assistant Secretary for Research and Technology should take additional steps, such as providing more specific guidance or instructions to the modal administrations on the information that should be updated or required, to ensure that the information in the Research Hub is complete and accurate. (Recommendation 2)

Agency: Department of Transportation: Office of the Assistant Secretary for Research and Technology
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The U.S. Committee on the Marine Transportation System should complete a government-wide assessment of the economic, environmental, and safety risks posed by gaps in maritime infrastructure in the U.S. Arctic to inform investment priorities and decisions. (Recommendation 1)

Agency: Department of Transportation: Committee on the Marine Transportation System
Status: Open

Comments: CMTS partially concurred with our recommendation but also noted several areas of disagreement with our conclusions, which we addressed directly in our report. For example, we note in our report that CMTS itself has previously noted the importance of evaluating risks on a government-wide basis, and that it previously proposed a model for determining risk that considered the likelihood of adverse events actually occurring, vulnerability to damage, and potential consequences. Given its previous work in the U.S. Arctic and its coordinating role with its member agencies, CMTS is well suited to conduct a government-wide assessment of the risks posed by gaps in maritime infrastructure in the U.S. Arctic. As such, we stand by our recommendation and will continue to report on steps taken by CMTS to address it.

Recommendation: The appropriate entities within the Executive Office of the President, including the Office of Science and Technology Policy should develop and publish a strategy for addressing U.S. Arctic maritime infrastructure that identifies goals and objectives, performance measures to monitor agencies' progress over time, and the appropriate responses to address risks. (Recommendation 2)

Agency: Executive Office of the President: Office of Science and Technology Policy
Status: Open

Comments: OSTP neither agreed nor disagreed with the report's recommendations. OSTP acknowledged the Arctic is of critical national importance and noted interagency coordination can be implemented through the entities of the National Science and Technology Council, which is located within OSTP. As we note in our report, without a strategy for addressing U.S. Arctic maritime infrastructure that identifies goals and objectives, performance measures to monitor agencies' progress over time, and the appropriate responses to address risks, agencies lack assurance that their actions are effectively targeting priority areas and decision makers cannot gauge the extent of progress in addressing maritime infrastructure gaps. As such, we stand by our recommendation and will continue to evaluate OSTP's efforts to fully address it.

Recommendation: The appropriate entities within the Executive Office of the President, including the Office of Science and Technology Policy should designate the interagency group responsible for leading and coordinating federal efforts to address maritime infrastructure in the U.S. Arctic that includes all relevant stakeholders. (Recommendation 3)

Agency: Executive Office of the President: Office of Science and Technology Policy
Status: Open

Comments: OSTP neither agreed nor disagreed with the report's recommendations. OSTP acknowledged the Arctic is of critical national importance and noted interagency coordination can be implemented through the entities of the National Science and Technology Council, which is located within OSTP. OSTP noted the need for, and role of additional federal coordination, such as the Arctic Executive Steering Committee, is under consideration by OSTP. We continue to believe that the appropriate entities within the Executive Office of the President, including OSTP, should designate the interagency group responsible for leading and coordinating federal efforts to address maritime infrastructure in the U.S. Arctic that includes all relevant stakeholders. As we note in our report, without an interagency collaboration mechanism designated to lead these efforts, it is unclear who has responsibility for whole-of-government efforts to address U.S. Arctic maritime infrastructure. We will continue to monitor OSTP's efforts to fully address our recommendation.

Recommendation: GSA should assess and address the reliability of the information used to calculate reported cost savings for the broker program. (Recommendation 1)

Agency: General Services Administration
Status: Open
Priority recommendation

Comments: In June 2020, GSA said the agency would validate system data through regional and broker outreach and fully utilize validated system data to manage the broker program. The agency also said it will develop a quality control plan and follow-up on outcomes. We will continue to monitor GSA's progress with implementing this recommendation.

Recommendation: GSA should develop outcome-based metrics to evaluate the effectiveness of using brokers to supplement the GSA's leasing workforce. (Recommendation 2)

Agency: General Services Administration
Status: Open

Comments: Although GSA initially did not concur with this recommendation, the agency stated in June 2020 that it agrees with the recommendation and will take steps to implement it. Specifically, GSA plans to revise the broker performance standards and document broker effectiveness through lease cost avoidance, timely lease replacement, and earned commission credits. We will continue to monitor GSA's progress with implementing this recommendation.

Recommendation: The Director of BLM should establish outcome-oriented performance measures to assess the effectiveness of the reorganization. (Recommendation 1)

Agency: Department of the Interior: Bureau of Land Management
Status: Open

Comments: The department neither agreed nor disagreed with our recommendation. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of BLM should develop an implementation plan for the reorganization that includes milestones and deliverables to track and communicate implementation progress. (Recommendation 2)

Agency: Department of the Interior: Bureau of Land Management
Status: Open

Comments: The department neither agreed nor disagreed with our recommendation. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of BLM should complete a strategic workforce plan that addresses how it will recruit for and fill vacant positions resulting from the relocations. (Recommendation 3)

Agency: Department of the Interior: Bureau of Land Management
Status: Open

Comments: The department neither agreed nor disagreed with our recommendation. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Interior should ensure its bureau leadership incorporates key practices for effective agency reforms prior to implementing reorganization activities at other Interior bureaus. (Recommendation 4)

Agency: Department of the Interior: Office of the Secretary
Status: Open

Comments: The department neither agreed nor disagreed with our recommendation. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the Office of Management and Budget should (1) require that agencies explicitly document annual data center closure goals in their DCOI strategic plans and (2) track those goals on the IT Dashboard. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: The Office of Management and Budget (OMB) has not yet taken action to address this recommendation. We will continue to monitor the agency's efforts to implement this recommendation.

Recommendation: The Director of the Office of Management and Budget should require agencies to report in their quarterly inventory submissions those facilities previously reported as data centers, even if those facilities are not subject to the closure and optimization requirements of DCOI. (Recommendation 2)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: The Office of Management and Budget (OMB) has not yet taken action to address this recommendation. We will continue to monitor the agency's efforts to implement this recommendation.

Recommendation: The Director of the Office of Management and Budget should document OMB's decisions on whether to approve individual data centers when designated by agencies as either a mission critical facility or as a facility not subject to DCOI. (Recommendation 3)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: The Office of Management and Budget (OMB) has not yet taken action to address this recommendation. We will continue to monitor the agency's efforts to implement this recommendation.

Recommendation: The Director of the Office of Management and Budget should take action to address the key performance measurement characteristics missing from the DCOI optimization metrics, as identified in this report. (Recommendation 4)

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: The Office of Management and Budget (OMB) has not yet taken action to address this recommendation. We will continue to monitor the agency's efforts to implement this recommendation.

Recommendation: The Secretary of Agriculture should take action to achieve its data center-related cost savings target established under DCOI by OMB. (Recommendation 5)

Agency: Department of Agriculture
Status: Open

Comments: In comments on our report, the Department of Agriculture (Agriculture) agreed with our recommendation and stated that it planned to meet the cost savings target in 2020. We will continue to monitor Agriculture's efforts to implement this recommendation.

Recommendation: The Secretary of Commerce should take action to achieve its data center-related cost savings target established under DCOI by OMB. (Recommendation 6)

Agency: Department of Commerce: Office of the Secretary
Status: Open

Comments: In comments on our report, the Department of Commerce (Commerce) agreed with our recommendation and described actions that they planned to take in order to address the recommendation. We will continue to monitor Commerce's efforts to implement this recommendation.

Recommendation: The Secretary of Commerce should take action to meet its data center optimization metric targets established under DCOI by OMB. (Recommendation 7)

Agency: Department of Commerce: Office of the Secretary
Status: Open

Comments: In comments on our report, the Department of Commerce (Commerce) agreed with our recommendation and described actions that they planned to take in order to address the recommendation. We will continue to monitor Commerce's efforts to implement this recommendation.

Recommendation: The Administrator of the National Aeronautics and Space Administration should take action to achieve its data center-related cost savings target established under DCOI by OMB. (Recommendation 8)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: In comments on our report, the National Aeronautics and Space Administration (NASA) agreed with our recommendation and described actions that the agency planned to take to address the recommendation. NASA stated that it expected to complete these actions by March 31, 2020. Once we have obtained and assessed evidence of the agency's actions taken, we will update the status of this recommendation.

Recommendation: The Secretary of Agriculture should direct Departmental Administration to work with the mission areas to develop department-level outcome-oriented performance goals and related measures for the business centers, and use them to assess the effectiveness and impact of the business center reforms. (Recommendation 1)

Agency: Department of Agriculture
Status: Open

Comments: In January 2020, USDA officials agreed with our recommendation and stated that the department is evaluating options for the development of performance metrics and inclusion of these metrics and related information as part of the regular and recurring reviews by the department's Deputy Secretary who is identified as the Chief Operating Officer.

Recommendation: The TSA Administrator should develop performance goals for its Insider Threat Program that assess progress achieving the strategic objectives in the insider threat strategic plan. (Recommendation 2)

Agency: Department of Homeland Security: Transportation Security Administration
Status: Open

Comments: In May 2020, TSA published its strategic framework, the TSA Insider Threat Roadmap, for mitigating insider threats in the transportation sector. The Roadmap contains three overarching strategic priorities and specific objectives for each of these priorities to refine and continue to improve its efforts to detect, deter, and mitigate insider threats. TSA described that its next steps will be to develop implementation plans for each of these priorities and objectives, including detailed plans of actions with timelines and performance measures to assess its progress achieving the Roadmap's priorities and objectives. We will continue to monitor TSA's efforts to implement our recommendation.

Recommendation: The Chairman of FCC should develop specific, measurable goals and performance measures for its efforts to monitor the performance of new WEA capabilities, such as enhanced geo-targeting and expanded alert message length. (Recommendation 1)

Agency: Federal Communications Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the IPAWS program should document how it plans to address key actions needed to educate alerting authorities in their use of IPAWS and implement a mechanism that will allow FEMA to regularly and systematically obtain and analyze feedback on alerting authorities' educational needs. (Recommendation 2)

Agency: Department of Homeland Security: Directorate of Emergency Preparedness and Response: Federal Emergency Management Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the IPAWS program should establish procedures to prioritize pending IPAWS applications and to follow up with applicants to address these applications. (Recommendation 3)

Agency: Department of Homeland Security: Directorate of Emergency Preparedness and Response: Federal Emergency Management Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The CISA Director should ensure that the operations plan fully addresses all lines of effort in the strategic plan for securing election infrastructure for the upcoming elections. (Recommendation 2)

Agency: Department of Homeland Security: Cybersecurity and Infrastructure Security Agency
Status: Open

Comments: The agency agreed with the recommendation and has taken steps towards implementing it. Specifically, in March 2020 CISA finalized its operations plan for the 2020 elections. CISA's operations plan addresses one of the 13 objectives and key actions from the strategic plan -- monitor threat activity. While CISA's operations plan is to supplement the agency's strategy, the plan does not fully address any of the four lines of effort and the other 12 objectives outlined in the strategic plan. When examining the key actions for the remaining 12 objectives in the strategic plan, we were only able to confirm that 10 of the 27 key actions called for in those strategic plan objectives were fully addressed. We will continue to monitor the agency's progress in implementing our recommendation.

Recommendation: The CISA Director should document how the agency intends to address challenges identified in its prior election assistance efforts and incorporate appropriate remedial actions into the agency's 2020 planning. (Recommendation 3)

Agency: Department of Homeland Security: Cybersecurity and Infrastructure Security Agency
Status: Open

Comments: The agency agreed with the recommendation and has taken steps towards implementing it. We reported in February 2020 that CISA's strategic plan had only addressed three challenges from its external lessons learned review. Subsequently, CISA addressed two additional challenges in its operations plan, which was finalized in March 2020, and its election infrastructure subsector specific plan, which was updated in March 2020. CISA's plans addressed challenges regarding the agency's role in sharing and collecting intelligence across the election community and facilitating industry-wide vulnerability disclosures. However, CISA has not documented how the agency intends to address other identified challenges and how it will incorporate remedial actions into the agency's 2020 planning. We will continue to monitor the agency's progress in implementing our recommendation.

Recommendation: The Commandant of the Coast Guard should direct the Assistant Commandant for Engineering and Logistics and Assistant Commandant for Prevention Policy to update the Coast Guard's ATON-related initiatives to include the specific outcomes to be achieved and associated time frames. (Recommendation 1)

Agency: Department of Homeland Security: United States Coast Guard
Status: Open

Comments: DHS concurred with our recommendation and stated that the Coast Guard plans to review and update ATON-related initiatives to include specific outcomes with associated implementation milestones by December 31, 2020.

Recommendation: The Assistant Administrator for EPA's Office of Enforcement and Compliance Assurance should clearly document in guidance to the regional offices how they should use the definition of informal enforcement actions to collect data on these actions. (Recommendation 1)

Agency: Environmental Protection Agency
Status: Open

Comments: In written comments reproduced in appendix I of this report, EPA stated that it agreed with this recommendation. In July 2020, EPA stated that in a September 30, 2019 guidance document, the agency defined an informal enforcement action. However, on March 24, 2020, the Office of Enforcement and Compliance Assurance (OECA) suspended the September guidance because informal enforcement actions as defined appear to be inconsistent with Section 6 of the White House's Executive Order (EO) 13892, Promoting the Rule of Law Through Transparency and Fairness in Civil Administrative Enforcement and Adjudication, issued on October 9, 2019. EPA said that it would amend the September 2019 guidance to be consistent with the Executive Order. Our recommendation focused on guidance on how regional offices should use the definition of informal enforcement action and we will continue to monitor EPA's implementation of this recommendation.

Recommendation: The Assistant Administrator for EPA's Office of Enforcement and Compliance Assurance should clearly document in guidance to the regional offices that they should collect data on compliance assistance activities and specify which mechanism to use to maintain the data, such as ICIS. (Recommendation 2)

Agency: Environmental Protection Agency
Status: Open

Comments: In written comments reproduced in appendix I of this report, EPA stated that it agreed with this recommendation and would collect data on compliance assistance for each of the National Compliance Initiatives and maintain those data in ICIS. Specifically, in July 2020, the agency stated that in order to further its compliance assistance efforts, the Office of Enforcement and Compliance Assistance (OECA) is including a compliance assistance tool as an important part of each of EPA's National Compliance Initiatives. According to EPA, data on compliance assistance efforts that are part of the NCI will be collected and tracked for management review in the Integrated Compliance Information System. In addition, EPA stated it has collected data in the past on webpage visits related to its national Compliance Assistance Centers and would continue to do so in the future. We will continue to monitor the status of EPA's implementation of this recommendation.

Recommendation: The Assistant Administrator for EPA's Office of Enforcement and Compliance Assurance should include the known limitations of data in its annual reports and provide information on the intended use of EPA's data. (Recommendation 3)

Agency: Environmental Protection Agency
Status: Open

Comments: In written comments reproduced in appendix I of this report, EPA stated that it agreed with this recommendation and acknowledged the importance of providing information about a dataset to facilitate proper interpretation. For that reason, EPA said that, in time for its fiscal year 2020 report, the agency will create a webpage to describe how best to interpret the data presented in its "Fiscal Year EPA Enforcement and Compliance Annual Results" report and include a reference to that webpage in the report itself as well as the "Year in Review" report. In July 2020, EPA reiterated its written comments on the report. We will update the status of EPA's implementation of this recommendation upon the release of its annual reports.

Recommendation: The Secretary of State should take additional steps to identify diversity issues that could indicate potential barriers to equal opportunity in its workforce. For example, State could conduct additional analyses of workforce data and of employee groups' feedback. (Recommendation 1)

Agency: Department of State
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Administrator of FTA should develop a communication plan that will effectively share information with state transportation agencies and rural and tribal transit providers on coordination opportunities and leading coordination practices in an accessible and informative way. (Recommendation 1)

Agency: Department of Transportation: Federal Transit Administration
Status: Open

Comments: As of June 2020, FTA partially concurred with this recommendation. FTA noted that they will direct the National Rural Transit Assistance Program (NRTAP) to create a centralized, searchable library database cataloging all available resources that cover transportation coordination. This library database will include resources developed by FTA, other Coordinating Council on Access and Mobility (CCAM) members, and their technical assistance centers and initiatives, such as the Rural Opportunities to Use Transportation for Economic Success (ROUTES). FTA will complete these actions by August 31, 2021. We will review the database and other resources when they become available.

Recommendation: The Secretary of Homeland Security should establish and implement a time frame for completing its drafting of the AED regulations and submitting them to the Office of Management and Budget for further review. (Recommendation 1)

Agency: Department of Homeland Security: Office of the Secretary
Status: Open

Comments: According to DHS, the department was still reviewing its AED regulations in March 2020. Thus, DHS had not completed drafting the regulations or submitted them to the Office of Management and Budget for further review. DHS aims to publish the regulations by July 2020.

Recommendation: The Deputy Director for Management of OMB, in conjunction with the PMPC, should develop program and project management standards to include (1) a minimum threshold for determining the extent to which agencies have met the standards, (2) how standards apply differently at the program and project levels, (3) how standards are interrelated to work in a synchronized way, and (4) how standards should be applied across the life cycle of a program or project. (Recommendation 1)

Agency: Executive Office of the President: Office of Management and Budget: Deputy Director for Management
Status: Open

Comments: Awaiting 180-day letter.

Recommendation: The Deputy Director for Management of OMB, in conjunction with the PMPC, should create a governance structure to further develop and maintain program and project management standards that fully aligns with key practices for governance structures. (Recommendation 2)

Agency: Executive Office of the President: Office of Management and Budget: Deputy Director for Management
Status: Open

Comments: Awaiting 180-day letter.

Recommendation: The Deputy Director for Management of OMB should, when expanding PMIAA to additional program types, design pilot efforts to follow leading practices so that OMB can optimize its efforts to improve and broaden portfolio reviews across a full range of program types. (Recommendation 3)

Agency: Executive Office of the President: Office of Management and Budget: Deputy Director for Management
Status: Open

Comments: Awaiting 180-day letter.

Recommendation: The Deputy Director for Management of OMB should communicate program areas and timeframes, and expectations pertinent to annual program portfolio reviews, to be reviewed in future program portfolio reviews. (Recommendation 4)

Agency: Executive Office of the President: Office of Management and Budget: Deputy Director for Management
Status: Open

Comments: Awaiting 180-day letter.

Recommendation: The Deputy Director for Management of OMB should clarify for agencies how the different definitions of a "program" relate to each other in OMB guidance. (Recommendation 5)

Agency: Executive Office of the President: Office of Management and Budget: Deputy Director for Management
Status: Open
Priority recommendation

Comments: We added this recommendation as a priority in our OMB priority recommendation letter in April 2020. We recommended that OMB clarify for agencies how different definitions of a "program" relate to each other in OMB guidance. Clarifying the definitions could help agencies and OMB increase transparency and identify synergies across related laws, such as GPRAMA and the Program Management Improvement Accountability Act of 2016.

Recommendation: The Deputy Director for Management of OMB should convene trilateral meetings between OMB, relevant agencies, and us for addressing all high-risk areas during each two-year high-risk cycle (Recommendation 6).

Agency: Executive Office of the President: Office of Management and Budget: Deputy Director for Management
Status: Open
Priority recommendation

Comments: We added this recommendation as a priority in our OMB priority recommendation letter in April 2020. OMB should convene trilateral meetings between OMB, relevant agencies, and us for addressing all areas on our High Risk List during each two-year high-risk cycle. Doing so would better position OMB to enhance the leadership commitment needed to make greater progress on high-risk areas. Meetings with senior OMB and agency officials on individual high-risk areas have proven in the past to be helpful to making progress. These meetings would also help OMB meet statutory requirements to conduct portfolio reviews of programs on GAO's high-risk list.

Recommendation: The Deputy Director for Management of OMB, in conjunction with PMPC, should ensure PMPC meeting agendas include time for discussing high-risk areas during meetings and provide time for the PMPC to make recommendations to OMB about addressing high-risk areas. (Recommendation 7)

Agency: Executive Office of the President: Office of Management and Budget: Deputy Director for Management
Status: Open

Comments: Awaiting 180-day letter.

Recommendation: The Deputy Director for Management of OMB, in conjunction with PMPC, should establish measures to assess outcomes of PMIAA, such as establishing a baseline of information on programs or collecting trend data. (Recommendation 8)

Agency: Executive Office of the President: Office of Management and Budget: Deputy Director for Management
Status: Open

Comments: Awaiting 180-day letter.

Recommendation: The Secretary of Commerce should update the department's environmental justice strategic plan. (Recommendation 1)

Agency: Department of Commerce
Status: Open

Comments: The department did not provide comments on our report or recommendation. We will continue to review the department's actions and provide updated information.

Recommendation: The Assistant Secretary of Defense for Sustainment should update the department's environmental justice strategic plan. (Recommendation 2)

Agency: Department of Defense: Office of the Secretary of Defense: Office of the Under Secretary of Defense for Acquisition and Sustainment: Office of the Assistant Secretary of Defense for Sustainment
Status: Open

Comments: In its comments on our report, the department agreed with this recommendation. We will continue to review the department's actions and provide updated information.

Recommendation: The Secretary of Education should update the department's environmental justice strategic plan. (Recommendation 3)

Agency: Department of Education
Status: Open

Comments: In its comments on our report, Education stated that we did not sufficiently account for the limitations on its legal authority to carry out environmental justice activities. Education also stated that it does not believe this is the most appropriate course of action for the department or an efficient use of resources. We believe that Education can develop a strategic plan within its existing authorities. We will continue to review the department's actions to implement the recommendation.

Recommendation: The Secretary of Homeland Security should update the department's environmental justice strategic plan. (Recommendation 4)

Agency: Department of Homeland Security
Status: Open

Comments: In comments on our report, the department agreed with this recommendation. We will continue to review the department's actions and update this information.

Recommendation: The Secretary of Housing and Urban Development should update the department's environmental justice strategic plan. (Recommendation 5)

Agency: Department of Housing and Urban Development
Status: Open

Comments: In comments on our report, the department neither agreed nor disagreed with this recommendation. We will continue to review the department's actions and update this information.

Recommendation: The Attorney General of the United States should update the department's environmental justice strategic plan. (Recommendation 6)

Agency: Department of Justice
Status: Open

Comments: In April 2020, the department agreed to review its environmental justice strategy and to revise it if needed. It also stated that as part of that review, it will consider any guidance issued by the Interagency Working Group on Environmental Justice (EJ IWG) concerning what agencies should include in environmental justice strategic plans. The department stated that it anticipated receiving such guidance by the end of 2020. We will continue to review the department's actions and update this information.

Recommendation: The Secretary of Labor should update the department's environmental justice strategic plan. (Recommendation 7)

Agency: Department of Labor
Status: Open

Comments: In November 2019, the department stated that its role is tangential to achieving environmental justice goals, but it is committed to integrating environmental justice into its responsibilities to protect workers. It stated that it has no plans at this time to update its environmental strategic plan. We agree that Labor should develop an environmental plan that contains goals consistent with its mission and authorities. We will continue to review its actions to implement our recommendation.

Recommendation: The Administrator of the Small Business Administration should complete the agency's assessment of whether to participate in the 1994 Executive Order and the 2011 Memorandum of Understanding, and, if appropriate, develop an environmental justice strategic plan. (Recommendation 8)

Agency: Small Business Administration
Status: Open

Comments: In its comments on our report, the agency agreed with our recommendation. We will continue to review the agency's actions to update its progress in implementing the recommendation.

Recommendation: The Secretary of Veterans Affairs should update the department's environmental justice strategic plan. (Recommendation 9)

Agency: Department of Veterans Affairs
Status: Open

Comments: In April 2020, the department committed to updating its environmental justice strategic plan. It said that it will update its strategic plan pending the Environmental Protection Agency's (EPA) guidance on what agencies should include in their plans. It also set a goal of completing the update within 6 months of EPA's issuance of guidance. We will continue to review the department's actions and update this information.

Recommendation: The Secretary of Agriculture should issue a progress report on the department's environmental justice efforts each year. (Recommendation 10)

Agency: Department of Agriculture
Status: Open

Comments: In comments on our report, USDA agreed with our recommendation. We will continue to review the department's actions and provide updated information.

Recommendation: The Secretary of Commerce should issue a progress report on the department's environmental justice efforts each year. (Recommendation 11)

Agency: Department of Commerce
Status: Open

Comments: The department did not provide comments on our report or recommendation. We will continue to review the department's actions and provide updated information.

Recommendation: The Assistant Secretary of Defense for Sustainment should issue a progress report on the department's environmental justice efforts each year. (Recommendation 12)

Agency: Department of Defense: Office of the Secretary of Defense: Office of the Under Secretary of Defense for Acquisition and Sustainment: Office of the Assistant Secretary of Defense for Sustainment
Status: Open

Comments: In its comments on our report, the Department of Defense (DOD) disagreed with this recommendation. First, DOD stated that it had achieved the intent of Executive Order 12898 by including environmental justice considerations in its decision-making processes, primarily by using the environmental review process. Second, the department stated that it is bound by its mission with limited opportunities to change where the department operates. DOD stated that these reasons make it a significant challenge for the department to meet our recommendation and therefore does not see a tangible benefit to additional reporting. As we stated in our report, DOD would be reporting on goals that it set within its mission and authorities. We will continue to review DOD's actions to carry out this recommendation.

Recommendation: The Secretary of Education should issue a progress report on the department's environmental justice efforts each year. (Recommendation 13)

Agency: Department of Education
Status: Open

Comments: In its comments on our report, Education stated that we did not sufficiently account for the limitations on its legal authority to carry out environmental justice activities. Education also stated that it does not believe this recommendation is the most appropriate course of action for the department or an efficient use of resources. We believe that Education can develop a strategic plan within its existing authorities, and then it should report its progress on these activities annually. We will continue to review the department's actions to implement the recommendation.

Recommendation: The Secretary of Health and Human Services should issue a progress report on the department's environmental justice efforts each year. (Recommendation 14)

Agency: Department of Health and Human Services
Status: Open

Comments: In comments on our report, the department agreed with this recommendation. We will continue to review the department's actions and provide updated information.

Recommendation: The Secretary of Energy should issue a progress report on the department's environmental justice efforts each year. (Recommendation 15)

Agency: Department of Energy
Status: Open

Comments: In January 2020, Department of Energy officials stated that they had issued progress reports for fiscal years 2017 and 2018 and would issue progress reports annually after this point. We will review the department's reports in upcoming years to determine that it has carried out this recommendation.

Recommendation: The Secretary of Housing and Urban Development should issue a progress report on its environmental justice efforts each year. (Recommendation 16)

Agency: Department of Housing and Urban Development
Status: Open

Comments: In comments on our report, the department agreed with this recommendation. We will continue to review the department's actions and update this information.

Recommendation: The Secretary of the Interior should issue a progress report on the department's environmental justice efforts each year. (Recommendation 17)

Agency: Department of the Interior
Status: Open

Comments: In its comments on our report, the department agreed with our recommendation. We will continue to review the department's actions and update this information.

Recommendation: The Secretary of Labor should issue a progress report on the department's environmental justice efforts each year. (Recommendation 18)

Agency: Department of Labor
Status: Open

Comments: In November 2019, the department stated that its role is tangential to achieving environmental justice goals and therefore it has no real chance to update its progress reports. We agree that Labor should develop an environmental strategic plan containing goals consistent with its mission and authorities. It can develop progress reports annually related to these goals. We will continue to review its actions to implement our recommendation and update this information.

Recommendation: The Secretary of Transportation should issue a progress report on the department's environmental justice efforts each year. (Recommendation 19)

Agency: Department of Transportation
Status: Open

Comments: In February 2020, the department stated that it partially agreed with this recommendation. It stated that it would update its progress reports as needed. As we stated in our report, leading practices for performance management indicate that annual performance reporting helps an agency to keep track of and achieve its goals. We will continue to review the department's actions and update this information.

Recommendation: The Secretary of Veterans Affairs should issue a progress report on the department's environmental justice efforts each year. (Recommendation 20)

Agency: Department of Veterans Affairs
Status: Open

Comments: In April 2020, the department committed to issuing annual progress reports. The department also stated that it will use EPA or Interagency Working Group (IWG) guidance on methods agencies could use to assess progress towards their environmental justice goals. It stated that it would begin issuing progress reports following issuance of such guidance and per reporting schedule established by the Environmental Justice IWG. We will continue to review the department's actions and update this information.

Recommendation: The Administrator of EPA, as chair of the working group, should develop guidance for agencies on what they should include in their environmental justice strategic plans. (Recommendation 21)

Agency: Environmental Protection Agency
Status: Open

Comments: In its comments on our report, EPA agreed with this recommendation. We will continue to review the agency's actions and update this information.

Recommendation: The Administrator of EPA, as chair of the working group, should develop guidance or create a committee of the working group to develop guidance on methods the agencies could use to assess progress toward their environmental justice goals. (Recommendation 22)

Agency: Environmental Protection Agency
Status: Open

Comments: In its comments on our report, EPA agreed with this recommendation. We will continue to review the agency's actions to update its progress in implementing this recommendation.

Recommendation: The Administrator of EPA, as chair of the working group, and in consultation with the working group, should clearly establish, in its organizational documents, strategic goals for the federal government's efforts to carry out the 1994 Executive Order. (Recommendation 23)

Agency: Environmental Protection Agency
Status: Open

Comments: In its comments on our report, EPA disagreed with this recommendation, but also stated that it would lead efforts to update the working group's fiscal year 2016-2018 Framework for Collaboration to include guidance for strategic plans, tracking progress toward goals, and defining alignment with the executive order. We believe that if the agency carries out these actions, it will meet the intent of the recommendation. We will continue to review the agency's actions to update its progress in implementing the recommendation.

Recommendation: The Administrator of EPA, as chair of the working group, and in consultation with the other working group members, should update the 2011 Memorandum of Understanding and renew the agencies' commitments to participate in the interagency collaborative effort and the working group. (Recommendation 24)

Agency: Environmental Protection Agency
Status: Open

Comments: In its comments on our report, EPA disagreed with this recommendation and stated that it should be combined with the recommendation to update the Environmental Justice working group's strategic documents. We believe the agency misunderstood the recommendation. As we stated in the report, we believe that the MOU needs to be updated to address the matter of participation by the members who signed it but do not participate. We will continue to review the agency's actions to update its progress in implementing this recommendation.

Recommendation: The Secretary of Energy, in coordination with DHS and other relevant stakeholders, should develop a plan aimed at implementing the federal cybersecurity strategy for the electric grid and ensure that the plan addresses the key characteristics of a national strategy, including a full assessment of cybersecurity risks to the grid. (Recommendation 1)

Agency: Department of Energy
Status: Open
Priority recommendation

Comments: DOE agreed with our recommendation. In its response to our report, DOE stated that it was working through an interagency process to develop a National Cyber Strategy Implementation Plan that will consider DOE's Multiyear Plan for Energy Sector Cybersecurity. To fully address our recommendation, DOE should coordinate with DHS and other relevant stakeholders to develop a plan for implementing the federal cybersecurity strategy for the electric grid and ensure that the plan addresses the key characteristics of a national strategy.

Recommendation: FERC should consider our assessment and determine whether to direct the North American Electric Reliability Corporation (NERC) to adopt any changes to its cybersecurity standards to ensure those standards more fully address the NIST Cybersecurity framework and address current and projected risks. (Recommendation 2)

Agency: Federal Energy Regulatory Commission
Status: Open

Comments: In August 2020, FERC officials told GAO that the Commission assembled a team to conduct a technical analysis to develop a plan with appropriate next steps to address GAO's recommendations. As part of this effort, FERC issued two documents. In June 2020, FERC issued a Notice of Inquiry seeking comments on (1) whether NERC's cybersecurity standards adequately address certain NIST Cybersecurity Framework categories, and (2) whether modifications to the cybersecurity standards would be appropriate to address the potential risk of a coordinated cyberattack on geographically distributed targets. Additionally, in June 2020, FERC issued a white paper exploring a new framework for providing incentives to transmission facilities for cybersecurity investments that exceed the requirements of NERC's cybersecurity standards. The incentives are designed, in part, to incentivize cybersecurity investments by facilities that are not covered by NERC's cybersecurity standards, according to FERC officials. As of October 2020, this recommendation remains open.

Recommendation: FERC should (1) evaluate the potential risk of a coordinated cyberattack on geographically distributed targets and, (2) based on the results of that evaluation, determine whether to direct NERC to make any changes to the threshold for mandatory compliance with requirements in the full set of cybersecurity standards. (Recommendation 3)

Agency: Federal Energy Regulatory Commission
Status: Open

Comments: In August 2020, FERC officials told GAO that the Commission assembled a team to conduct a technical analysis to develop a plan with appropriate next steps to address GAO's recommendations. As part of this effort, FERC issued two documents. In June 2020, FERC issued a Notice of Inquiry seeking comments on (1) whether NERC's cybersecurity standards adequately address certain NIST Cybersecurity Framework categories, and (2) whether modifications to the cybersecurity standards would be appropriate to address the potential risk of a coordinated cyberattack on geographically distributed targets. Additionally, in June 2020, FERC issued a white paper exploring a new framework for providing incentives to transmission facilities for cybersecurity investments that exceed the requirements of NERC's cybersecurity standards. The incentives are designed, in part, to incentivize cybersecurity investments by facilities that are not covered by NERC's cybersecurity standards, according to FERC officials. As of October 2020, this recommendation remains open.

Recommendation: The Administrator of EPA should work with the Commissioner of FDA and Secretary of Agriculture to incorporate leading collaboration practices as they implement their interagency FLW reduction strategic plan, to include (1) agreeing on roles and responsibilities; (2) developing mechanisms to monitor, evaluate, and report on results; (3)clearly defining short- and long-term outcomes; (4) identifying how leadership commitment will be sustained; and (5) ensuring that the relevant stakeholders have been included in the collaborative effort.(Recommendation 1)

Agency: Environmental Protection Agency
Status: Open

Comments: The agency agreed with this recommendation. As of June 2020, EPA indicated that its proposed completion date is October 2020. EPA published joint and individual agency accomplishments in each of the six priority areas listed as contributing efforts on EPA's webpage (https://www.epa.gov/sustainable-management-food/winning-reducing-food-waste-federal-interagency-strategy). In addition, EPA indicated that it is coordinating with government and other stakeholders through: (1) monthly high-level check-in calls for senior USDA and FDA officials, in which the meeting chair rotates among agencies; (2) twice a month (or as needed) staff work group meetings, led by the recently appointed USDA food loss and waste liaison, to explore potential activities aligned with the six priority areas in the interagency strategy to reduce food loss and waste; and (3) participation in quarterly meetings with relevant stakeholders, such as ReFED, the Food Waste Reduction Alliance (FWRA), and Further with Food, to coordinate efforts and learn of opportunities to collaborate on reducing food loss and waste. We will continue to follow up with the agency. When we confirm what additional actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of FDA should work with the Administrator of EPA and Secretary of Agriculture to incorporate leading collaboration practices as they implement their interagency FLW reduction strategic plan, to include (1) agreeing on roles and responsibilities; (2) developing mechanisms to monitor, evaluate, and report on results; (3)clearly defining short- and long-term outcomes; (4) identifying how leadership commitment will be sustained; and (5) ensuring that the relevant stakeholders have been included in the collaborative effort. (Recommendation 2)

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: The agency agreed with this recommendation. As of December 2019, we are following up with the agency. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Agriculture should work with Administrator of EPA and Commissioner of FDA to incorporate leading collaboration practices as they implement their interagency FLW reduction strategic plan, to include (1) agreeing on roles and responsibilities; (2) developing mechanisms to monitor, evaluate, and report on results; (3)clearly defining short- and long-term outcomes; (4) identifying how leadership commitment will be sustained; and (5) ensuring that the relevant stakeholders have been included in the collaborative effort. (Recommendation 3)

Agency: Department of Agriculture
Status: Open

Comments: The agency agreed with this recommendation. As of December 2019, we are following up with the agency. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: NNSA's Energetic Materials Enterprise Manager and relevant NNSA officials and contractor representatives at NNSA sites should take steps to improve the accuracy of FIMS data related to NNSA's infrastructure supporting explosives activities. These steps should include reviewing and updating information about associations of assets with primary and secondary explosives missions; ensuring that those who provide asset information to FIMS administrators understand the data they need to provide; and clarifying how to accurately enter information in FIMS for explosives assets that are not buildings. (Recommendation 1)

Agency: Department of Energy: National Nuclear Security Administration
Status: Open

Comments: As of July 2020, we are currently reviewing agency information and plan to reach out as needed for additional information for this recommendation.

Recommendation: NNSA's Energetic Materials Enterprise Manager, in consultation with members of NNSA's Energetics Coordinating Committee, should, as the agency revises its Defense Programs Strategic Plan for Energetic Materials, include discussion of identified challenges related to explosives activities, such as data quality, workforce levels, and safety as well as any actions to address them, as appropriate, or document the rationale for why identified challenges were not included. (Recommendation 2)

Agency: Department of Energy: National Nuclear Security Administration
Status: Open

Comments: Based on trade press reports, NNSA appears to be taking several actions that, collectively, may serve to close this recommendation as implemented. As of July 2020, we are awaiting information from agency officials and will update the status of this recommendation when the information is received.

Recommendation: NNSA's Energetic Materials Enterprise Manager, in consultation with members of NNSA's Energetics Coordinating Committee, should, as the agency revises its Defense Programs Strategic Plan for Energetic Materials, include fully developed elements of an effective strategic plan, such as a clearly identified mission statement and performance goals that are quantifiable, set time frames for completion, and list responsible parties to carry out specific activities for all strategic goals. (Recommendation 3)

Agency: Department of Energy: National Nuclear Security Administration
Status: Open

Comments: Based on trade press reports, NNSA appears to be making progress implementing this recommendation. As of July 2020, we have requested additional information from agency officials and will update the recommendation status when the information is received.

Recommendation: To improve VA's ability to plan for and align its facilities with estimated changes to veterans' needs and expectations, we recommend that the Secretary of Veterans Affairs ensure the appropriate offices and administrations develop and implement a process to assess veterans' changing expectations and disseminate this information to VAMCs. (Recommendation 1)

Agency: Department of Veterans Affairs
Status: Open

Comments: VA concurred with this recommendation, but noted that it had already developed and implemented effective systems for obtaining Veterans' input in facility planning. However, we found that the information VA collects through these efforts may be limited based on our review of VA's surveys, including VSignals and the Survey of Enrollees, as well as our discussions with several Veterans Service Organizations. For example, we found that VA's efforts were limited because they either focused on overall veteran expectations without a means of assessing how they differed by demographics, or they focused on veteran satisfaction with their past experiences. Moreover, satisfaction with past experiences, as operationalized by VA for the surveys we reviewed, measured how someone is with what they received--while "expectations," as defined by VA, would measure or gain insight into what it is that someone would want, and which may or may not be what they are receiving. Thus, while satisfaction, as operationalized by VA, can be an indicator of an expectation, as defined by VA, the two are not synonymous. Although VA considers this recommendation closed, we are working with them to identify ways that expectations, as VA has defined the term, can be measured.

Recommendation: To improve VA's ability to plan for and align its facilities with estimated changes to veterans' needs and expectations, we recommend that the Secretary of Veterans Affairs ensure the appropriate offices and administrations instruct VAMCs on how to meet VA's strategic goal of incorporating veterans' changing needs and expectations into facility planning, such as by identifying certain resources or tools and directing VAMCs to use them. (Recommendation 2)

Agency: Department of Veterans Affairs
Status: Open
Priority recommendation

Comments: VA agreed with the recommendation and indicated that it would instruct users on what data to use in planning and updates, which would help ensure veterans' input is incorporated where appropriate. As of its fiscal year 2021 budget justification, VA still had not provided this guidance to the VAMCs, but noted that it would provide it in scheduled facility planning calls that were expected to start in the second quarter of fiscal year 2020.

Recommendation: To improve VA's ability to plan for and align its facilities with estimated changes to veterans' needs and expectations, we recommend that the Secretary of Veterans Affairs ensure the appropriate offices and administrations provide additional instruction to VAMCs on how to incorporate the concept of foundational health services into facility planning. (Recommendation 3)

Agency: Department of Veterans Affairs
Status: Open

Comments: VA concurred with this recommendation and noted that it would clarify prior guidance on the foundational health services for VAMCs, which it expected to complete in June 2019. In November 2019, VA told us that it had reviewed this prior guidance from August 2017 that had defined foundational services, and has rescinded it. However, we are working with VA to determine if this decision to rescind the prior guidance was distributed to VAMCs.

Recommendation: To improve VA's ability to plan for and align its facilities with estimated changes to veterans' needs and expectations, we recommend that the Secretary of Veterans Affairs ensure the appropriate offices and administrations systematically gather feedback from facility planners and address (as necessary) their concerns with the reliability of the SCIP process, including providing additional information on how SCIP's space estimates are derived. (Recommendation 4)

Agency: Department of Veterans Affairs
Status: Open
Priority recommendation

Comments: VA agreed with this recommendation and indicated that it would update its training instructions to facility planners by adding an explanation of how SCIP space estimates are derived. In addition, VA noted that it would survey facility planners about their concerns with the SCIP space estimates, and use these results to either address the concerns or make improvements to SCIP. As of November 2019, VA had not completed the training or the survey, but noted that they are in the process of updating training materials for the FY22 SCIP planning process--which was targeted to start 2019. We will work with VA to obtain relevant documentation of these efforts.

Recommendation: The Director of the Secret Service should develop and implement a plan to ensure that special agents assigned to Presidential Protective Division and Vice Presidential Protective Division reach annual training targets given current and planned staffing levels. (Recommendation 1)

Agency: Department of Homeland Security: United States Secret Service
Status: Open

Comments: In May 2019 we reported that the Secret Service had not met the established training target (25 percent of work time) and lacked a plan for achieving it. We therefore recommended that the Director of the Secret Service develop and implement a plan to ensure that special agents assigned to the Presidential Protective Division and the Vice Presidential Protective Division reach annual training targets given current and planned staffing levels. The agency concurred with our recommendation. Towards addressing this recommendation, in October 2019, the Secret Service reported that the Office of Protective Operations is currently soliciting training requirements from each internal operational division, including the Presidential and Vice Presidential Protective Divisions, to determine the appropriate amount of training and associated training hours for each division. They further reported that once reviewed, the training requirements are to inform the agency's revised Human Capital Strategic Plan. The revised Human Capital Strategic Plan is to include an overview of Office of Protective Operations' training requirements and corresponding staffing needs. The Secret Service anticipates a revised Human Capital Strategic Plan to be available by the end of January 2020. The Secret Service's efforts to reevaluate the training requirements and targets are a positive first step. However, Secret Service's actions are not fully consistent with the recommendation. Specifically, in its updated response, the Secret Service stated that training hours for Presidential Protective Division and Vice Presidential Protective Division special agents training will only increase once the agency nears its ultimate staffing target. This is inconsistent with our recommendation to establish a plan to ensure these special agents reach annual training targets given current staffing levels. In the interim, affected special agents may continue to lack training required to prevent security breaches, such as that of September 19, 2019, when an intruder jumped the north fence and entered the White House. We will continue to monitor the Secret Service's progress in implementing this recommendation.

Recommendation: The Director of the Secret Service should develop and implement a policy that documents the process for collecting complete Uniformed Division officer training data and establishes the types of information that should be collected. (Recommendation 2)

Agency: Department of Homeland Security: United States Secret Service
Status: Open

Comments: In May 2019 we reported that training data collected on the Secret Service's Uniform Division were incomplete and in certain cases unrelated to protection or lacked descriptions to clearly link the training to required skills. Further, the process used to capture the data was not consistently employed and did not include information on how or whether to capture internal on-the-job training instances, or instruction on the type of training to be captured to demonstrate that the training is protection-related training. We therefore recommended that the Director of the Secret Service develop and implement a policy that documents the process for collecting complete Uniformed Division officer training data and establishes the types of information that should be collected. The Secret Service, through DHS, concurred with our recommendation, stating that it would develop rigorous and uniform standards for collecting and reporting training data related to the Uniformed Division branch, and would work to capture additional training information. In response to our recommendation, in October 2019 the Secret Service reported that the Uniformed Division has worked with the Office of Training and Performance and Learning Management System (PALMS) team to capture Uniformed Division training requirements. The requirements are to include the 20 formalized on-the-job training programs for officers assigned to the Uniformed Division's White House, Foreign Missions, and Naval Observatory Branches, or one of the Special Operations Branch specialized units. In addition, the Secret Service stated that approximately 19 micro-training courses (also known as Roll Call Training) are currently captured within PALMS-the Department of Homeland Security's learning management system -and additional formalized on-the-job training programs are being reviewed for inclusion in PALMS. According to the Secret Service, use of PALMS should help ensure that the process for collecting and recording Uniformed Officer training is standardized and monitored. The Secret Service's efforts to capture additional training information in PALMS is a positive development. However, we have not yet observed progress towards the Secret Service's implementation of a policy that documents the process for collecting complete Uniformed Division officer training data and establishes the types of information that should be collected, as we recommended. We will continue to monitor the Secret Service's progress in implementing this recommendation.

Recommendation: The Secretary of Agriculture should take action to meet the data center optimization metric targets established by OMB under DCOI. (Recommendation 1)

Agency: Department of Agriculture
Status: Open

Comments: In comments on our report, the Department of Agriculture (Agriculture) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department subsequently reported meeting its targets for the advanced energy metering and server utilization metrics. However, the department also reported that it had not yet met its target for the virtualization metric. We will continue to monitor Agriculture's progress in implementing this recommendation.

Recommendation: The Secretary of Commerce should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 2)

Agency: Department of Commerce
Status: Open

Comments: In comments on our report, the Department of Commerce (Commerce) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department subsequently reported meeting its targets for server utilization. However, the department also reported that it had not yet met its target for the virtualization and advanced energy metering metrics. We will continue to monitor Commerce's progress in implementing this recommendation.

Recommendation: The Secretary of Defense should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: In comments on our report, the Department of Defense agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center closures target. The department subsequently reported meeting its closure target for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor the department's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of Defense should identify additional savings opportunities to achieve the targets for data center-related cost savings established under DCOI by OMB. (Recommendation 4)

Agency: Department of Defense
Status: Open

Comments: The Department of Defense is taking action to implement our recommendation. In comments on our report, the department stated that it had already identified significant cost savings through activities such as the identification of system migration candidates and the use of cloud services. The department also said that while it would continue to optimize its data centers, the need for IT would continue to grow, and this growth might ultimately lead to an increase in total data center costs, despite overall per unit cost reductions. In addition, after the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department reported achieving a total savings of $102.30 million and reported plans to save an additional $109.50 million in savings for fiscal year 2020. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor the department's efforts through fiscal year 2020 to address the recommendation.

Recommendation: The Secretary of Defense should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 5)

Agency: Department of Defense
Status: Open

Comments: The Department of Defense is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department subsequently reported meeting its target for server utilization. However, the department also reported that it had not yet met its target for the virtualization metric and advanced energy metering. We will continue to monitor the department's efforts to address the recommendation.

Recommendation: The Secretary of Energy should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 6)

Agency: Department of Energy
Status: Open

Comments: In comments on our report, the Department of Energy (Energy) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center closure target. The department subsequently reported meeting its closure target for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor Energy's progress in implementing this recommendation through fiscal year 2020.

Recommendation: The Secretary of Energy should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 7)

Agency: Department of Energy
Status: Open

Comments: The Department of Energy (Energy) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. The department subsequently reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor Energy's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of the Department of Health and Human Services (HHS) should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 8)

Agency: Department of Health and Human Services
Status: Open

Comments: The Department of Health and Human Services (HHS) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center closure target. The department subsequently reported meeting its closure target for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor HHS's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of HHS should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 9)

Agency: Department of Health and Human Services
Status: Open

Comments: The Department of Health and Human Services (HHS) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. Subsequently, the department reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor HHS's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of the Department of Homeland Security (DHS) should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 10)

Agency: Department of Homeland Security
Status: Open

Comments: In comments on our report, the Department of Homeland Security (DHS) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center closure target. Subsequently, the department reported meeting its closure target for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor DHS's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of DHS should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 11)

Agency: Department of Homeland Security
Status: Open

Comments: In comments on our report, The Department of Homeland Security (DHS) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. The department subsequently reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor DHS's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of Interior should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 12)

Agency: Department of the Interior
Status: Open

Comments: The Department of the Interior (Interior) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center closure target. Subsequently, the department reported meeting its closure goal for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor Interior's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of Interior should take action to meet the data center-related cost savings established under DCOI by OMB. (Recommendation 13)

Agency: Department of the Interior
Status: Open

Comments: The Department of Interior (Interior) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center related cost savings targets. Subsequently, the department reported achieving $0.2 million in data center-related cost savings and planned to save an additional $0.5 million in fiscal year 2020. We will continue to monitor the department's efforts through fiscal year 2020 to address the recommendation.

Recommendation: The Secretary of Interior should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 14)

Agency: Department of the Interior
Status: Open

Comments: The Department of Interior (Interior) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. The department subsequently reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor Interior's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Attorney General should take action to meet the data center optimization metric targets established for Justice under DCOI by OMB. (Recommendation 15)

Agency: Department of Justice
Status: Open

Comments: In comments on our report, the Department of Justice (Justice) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. The department subsequently reported meeting its targets for the virtualization and advanced energy metering metrics. However, the department did not have an established target for the server utilization metric. Justice stated that, due to OMB issuance of the revised DCOI guidance and metrics, the department had not developed a baseline and target for server utilization. Once it can track server utilization for a few reporting periods, the department stated that it will finalize its definition for underutilized severs and establish an appropriate target for the metric. We will continue to monitor the department's progress in implementing this recommendation.

Recommendation: The Secretary of the Department of Labor (Labor) should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 16)

Agency: Department of Labor
Status: Open

Comments: The Department of Labor (Labor) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. Subsequently, the department reported meeting its target for the server utilization metric. However, the department had not yet met its targets for the advanced energy metering and virtualization metrics. We will continue to monitor Labor's progress in implementing this recommendation.

Recommendation: The Secretary of State should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 17)

Agency: Department of State
Status: Open

Comments: In comments on our report, the Department of State (State) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center optimization closure target. The department subsequently reported meeting its closure goal for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor State's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of State should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 18)

Agency: Department of State
Status: Open

Comments: In comments on our report, the Department of State (State) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. Subsequently, the department reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor State's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of Transportation should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 19)

Agency: Department of Transportation
Status: Open

Comments: In comments on our report, the Department of Transportation (Transportation) neither agreed nor disagreed with the recommendation and has begun taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established a new data center closure target. The department subsequently reported meeting its closure goal for fiscal year 2019. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor Transportation's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of Transportation should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 20)

Agency: Department of Transportation
Status: Open

Comments: The Department of Transportation (Transportation) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. Subsequently, the department reported meeting its target for server utilization. However, the department had not yet met its targets for the advanced energy metering and virtualization metrics. We will continue to monitor Transportation's progress in implementing this recommendation.

Recommendation: The Secretary of Treasury should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 21)

Agency: Department of the Treasury
Status: Open

Comments: The Department of Treasury (Treasury) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the department established new data center optimization targets. The department subsequently reported meeting its target for server utilization. However, the department had not yet met its targets for the advanced energy metering and virtualization metrics. We will continue to monitor Treasury's progress in implementing this recommendation.

Recommendation: The Secretary of the Department of Veterans Affairs (VA) should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 22)

Agency: Department of Veterans Affairs
Status: Open
Priority recommendation

Comments: VA agreed with our recommendation and, as of January 2020, the department reported that it had closed 16 data centers to meet its fiscal year 2019 closure target. To fully implement this recommendation, VA will need to demonstrate sustained implementation progress over time, including meeting its fiscal year 2020 data center closure target.

Recommendation: The Secretary of VA should take action to meet the data center-related cost savings established under DCOI by OMB. (Recommendation 23)

Agency: Department of Veterans Affairs
Status: Open
Priority recommendation

Comments: VA agreed with our recommendation and, as of January 2020, the department reported that it had met its fiscal year 2019 cost savings target. To fully implement this recommendation, VA will need to demonstrate sustained implementation progress over time, including meeting its fiscal year 2020 data center cost savings target.

Recommendation: The Secretary of VA should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 24)

Agency: Department of Veterans Affairs
Status: Open
Priority recommendation

Comments: VA agreed with our recommendation and, as of January 2020, the department reported that it had met its fiscal year 2019 targets for three of the four data center optimization metrics tracked by the Office of Management and Budget (OMB). To fully implement this recommendation, VA will need to meet all four of OMB's metrics, and also demonstrate sustained implementation progress over time by continuing to meet the four metrics across fiscal years.

Recommendation: The Administrator of the Environmental Protection Agency (EPA) should take action to meet the data center closure targets established under DCOI by OMB. (Recommendation 25)

Agency: Environmental Protection Agency
Status: Open

Comments: The Environmental Protection Agency (EPA) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established a new data center closure target. EPA subsequently reported that it based its three planned closures for fiscal year 2019 on the data center definition applicable while developing its fiscal year 2019 DCOI strategic plan. However, when OMB updated its data center guidance it changed the definition of a data center, and as a result, the three facilities EPA planned to close no longer qualified as data centers. Further, EPA did not have plans to close any additional data centers. While EPA reported to us that it completed the planned closures, the three facilities did not represent what OMB now considers a data center, and so, EPA did not report the closures in its data center inventory update. However, we acknowledge that EPA closed the facilities identified in its April 2019 plan and did not plan to close any data centers that met OMB's new definition, meaning that the agency met its revised fiscal year 2019 goal of zero closures. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor EPA's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Administrator of EPA should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 26)

Agency: Environmental Protection Agency
Status: Open

Comments: The Environmental Protection Agency (EPA) is taking action to implement our recommendation. The agency established new data center optimization targets after the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019. Subsequently, the agency reported meeting its targets for the advanced energy metering and server utilization metrics. However, the agency had not yet met its target for the virtualization metric. We will continue to monitor EPA's progress in implementing this recommendation.

Recommendation: The Administrator of the National Aeronautics and Space Administration should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 28)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: In comments on our report, the National Aeronautics and Space Administration (NASA) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established new data center optimization targets. The agency subsequently reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor NASA's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Director of the National Science Foundation should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 29)

Agency: National Science Foundation
Status: Open

Comments: The National Science Foundation (NSF) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established new data center optimization targets. Subsequently, the agency reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor NSF's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Chairman of the Nuclear Regulatory Commission should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 30)

Agency: Nuclear Regulatory Commission
Status: Open

Comments: The Nuclear Regulatory Commission (NRC) is taking action to implement our recommendation. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established new data center optimization targets. The agency subsequently reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor NRC's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Director of the Office of Personnel Management (OPM) should take action to meet the data center-related cost savings established under DCOI by OMB. (Recommendation 31)

Agency: Office of Personnel Management
Status: Open

Comments: In comments on our report, The Office of Personnel Management (OPM) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established a new data center-related cost savings target. Subsequently, the agency reported meeting its fiscal year 2019 target of $7.65 million and planned to save an additional $7.65 million in fiscal year 2020. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor OPM's progress in implementing this recommendation through fiscal year 2020.

Recommendation: The Director of OPM should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 32)

Agency: Office of Personnel Management
Status: Open

Comments: In comments on our report, the Office of Personnel Management (OPM) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established new data center optimization targets. The agency subsequently reported meeting its targets for the virtualization and server utilization metrics. However, it had not met its target for advanced energy metering. We will continue to monitor OPM's progress in implementing this recommendation.

Recommendation: The Administrator of the Small Business Administration should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 33)

Agency: Small Business Administration
Status: Open

Comments: In comments on our report, the Small Business Administration (SBA) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established new data center optimization targets. Subsequently, the agency reported meeting its target for server utilization. However, the agency had not yet met its targets for the advanced energy metering and virtualization metrics. We will continue to monitor SBA's progress in implementing this recommendation.

Recommendation: The Commissioner of the Social Security Administration (SSA) should take action to meet the data center-related cost savings established under DCOI by OMB. (Recommendation 34)

Agency: Social Security Administration
Status: Open

Comments: In comments on our report, the Social Security Administration (SSA) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established a new data center-related cost savings target. The agency subsequently reported meeting its fiscal year 2019 cost savings target of $0. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor SSA's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Commissioner of SSA should take action to meet the data center optimization metric targets established under DCOI by OMB. (Recommendation 35)

Agency: Social Security Administration
Status: Open

Comments: In comments on our report, the Social Security Administration (SSA) agreed with our recommendation and began taking action to implement it. After the Office of Management and Budget (OMB) released the updated Data Center Optimization Initiative policy in June 2019, the agency established new data center optimization targets. Subsequently, the agency reported meeting its targets for the virtualization, advanced energy metering, and server utilization metrics. However, given the short time to evaluate implementation efforts between when OMB released the updated policy in June 2019 and the end of fiscal year 2019, we will continue to monitor SSA's efforts to implement this recommendation through fiscal year 2020.

Recommendation: The Secretary of the Army, in conjunction with the U.S. Army Materiel Command, should assess the effectiveness of the Army depots' hiring, training, and retention programs. (Recommendation 1)

Agency: Department of Defense
Status: Open

Comments: The Army concurred with our recommendation. In February 2020 the Army provided GAO with an outline of a corrective action plan that identified how the Army plans to address our recommendation. Some of the planned milestone dates for these action items occur in fiscal year 2021. As of June 30, 2020 we consider the actions the Army taking to address our rec as ongoing, and will follow up with the Army later this year or early 2021 to obtain a status update on this rec and attempt to close the rec.

Recommendation: The Secretary of the Navy, in conjunction with the Naval Sea Systems Command and Naval Air Systems Command, should assess the effectiveness of the Navy's shipyards' and fleet readiness centers' hiring, training, and retention programs. (Recommendation 2)

Agency: Department of Defense
Status: Open

Comments: The Navy concurred with our recommendation. In response to our recommendation that the Secretary of the Navy, in conjunction with the Naval Sea Systems Command and Naval Air Systems Command, should assess the effectiveness of the Navy's shipyards' and fleet readiness centers' hiring, training, and retention programs; the Navy is in the process of collecting information to assess the effectiveness of these programs and considers these efforts ongoing.

Recommendation: The Commandant of the Marine Corps, in conjunction with the Marine Corps Logistics Command, should assess the effectiveness of the Marine Corps depots' hiring, training, and retention programs. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: The Marine Corps concurred with our recommendation. In December of 2019 we began working with the Department of Defense, including each of the Military Service Components to determine how each component would address our recommendation. We successfully heard back from each component except the Marine Corps. As of June 30, 2020 GAO is still engaging with the Department of Defense and the Marine Corps to obtain a status update on the actions taken by the Marine Corps to address our recommendation. GAO will continue following up on this recommendation in 2020 and during the 2021 fiscal year to determine how the Marine Corps has addressed our recommendation so we can close this recommendation if possible.

Recommendation: The Secretary of the Air Force, in conjunction with the Air Force Materiel Command, should assess the effectiveness of the Air Force air logistics complexes' hiring, training, and retention programs. (Recommendation 4)

Agency: Department of Defense
Status: Open

Comments: The Air Force concurred with our recommendation. In December 2019 the Air Force provided GAO with an outline of a corrective action plan that identified how the Air Force plans to address our recommendation. Many of the planned milestone dates for these action items occur in fiscal year 2021. As of June 30, 2020 we consider the actions the Air Force is taking to address our rec as ongoing and will follow up with the Air Force later this year or early 2021 to obtain a status update on this rec and attempt to close the rec.

Recommendation: The Postmaster General should identify and adopt a set of internal control standards that can be used as the basis for operational internal-control activities, such as those for scanning competitive products. (Recommendation 1)

Agency: United States Postal Service
Status: Open

Comments: USPS has completed a cost study to adopt an operational internal control framework. USPS has targeted December 31, 2020, for completion and implementation of this new internal control framework.

Recommendation: The Secretary of Homeland Security should create corresponding processes and procedures to help implement the mission, roles, and responsibilities defined in the delegation of authority or similar document to help ensure predictability, repeatability, and accountability in departmentwide and crosscutting strategy and policy efforts. (Recommendation 2)

Agency: Department of Homeland Security
Status: Open

Comments: The Department of Homeland Security agreed with GAO's recommendation, and finalized a delegation of authority, which is a requisite step in being able to complete this action, in December 2019. As of February 2020, however, the agency had not taken action that addresses GAO's September 2018 recommendation to create processes and procedures corresponding to the mission, roles, and responsibilities defined in the delegation of authority. To close this recommendation, PLCY will need to create such processes and procedures to help ensure predictability, repeatability, and accountability in department-wide and crosscutting strategy and policy efforts. Until DHS creates these processes and procedures, the Office of Strategy, Policy, and Plans' ability to lead and coordinate policy will continue to be limited. Taking this recommended action would enhance the department's efficiency and reduce risks associated with fragmentation in the development of department-wide and crosscutting strategies, policies, and plans

Recommendation: The Under Secretary for Strategy, Policy, and Plans should use the DHS Workforce Planning Guide to help identify and analyze any gaps in PLCY's workforce, design strategies to address any gaps, and communicate this information to DHS leadership. (Recommendation 3)

Agency: Department of Homeland Security
Status: Open

Comments: On December 3, 2019, PLCY restated its concerns with this recommendation--specifically, that due to changes in administration and secretarial priorities, PLCY has to recalibrate and base budget and staffing projections on what officials expect will be needed, rather than current needs due to changing priorities. PLCY's ability to properly align resources with current needs must remain flexible and the workforce planning guidance that GAO references does not allow for that in whole. GAO maintains that utilizing the workforce planning guidance can be done while still maintaining the desired flexibility.

Recommendation: The Under Secretary for Strategy, Policy, and Plans should enhance the use of collaboration and communication mechanisms to connect with staff in the components with responsibilities for policy and strategy to better identify and address emerging needs. (Recommendation 4)

Agency: Department of Homeland Security
Status: Open

Comments: On March 5, 2019, PLCY officials told us PLCY has instituted many cross-component efforts to more clearly define its roles and responsibilities. For example, PLCY convenes frequent engagements with components via the Immigration Policy Council, the Strategy and Policy Executive Steering Committee, the Deputies Management Action Group, and the Threat Prevention and Security Policy Council. On December 3, 2019, PLCY officials told us that the pending delegation of authority will help address this recommendation, and the delegation of authority is expected to be completed in calendar year 2020. To close this recommendation, PLCY must provide documentary evidence of collaboration and communication mechanisms to connect staff and better identify emerging needs.

Recommendation: Based on the estimates developed in Recommendation 1, the Commissioner of Internal Revenue should direct the Identity Assurance Office to prioritize foundational initiatives in its Identity Assurance Strategy and Roadmap. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: As of January 2020, the Internal Revenue Service (IRS) had taken preliminary steps to prioritize its foundational initiatives in its Identity Assurance Strategy and Roadmap (Roadmap), as GAO recommended in June 2018. For example, IRS documentation stated that initial efforts to update the original Roadmap included collecting implementation documents for the 14 foundational initiatives. IRS stated that this information and progress that IRS has made on the initiatives shows that the initiatives are a priority for IRS leadership. However, IRS has not used this information to clearly prioritize in-progress initiatives or supporting activities going forward. IRS stated that it intends to update its Roadmap annually, including prioritizing new and existing authentication initiatives and capabilities. IRS's continued attention to this action will help ensure that in-progress authentication initiatives are prioritized and completed.

Recommendation: The Commissioner of Internal Revenue should establish a policy for conducting risk assessments for telephone, in-person, and correspondence channels for authentication. This policy should include, for example, the frequency of assessments to be performed and timeframes for addressing deficiencies. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of November 2019, IRS officials had developed a draft policy for conducting risk assessments for telephone, in-person, and correspondence channels for authentication, as we recommended. IRS officials stated that once this policy is approved, it will be used to develop a plan to perform risk assessments for these authentication channels. IRS's continued attention to this recommendation will help ensure that it is aware of emerging threats to the tax environment.

Recommendation: Consistent with the policy developed in Recommendation 3, the Commissioner of Internal Revenue should direct the Identity Assurance Office and IRS business owners to develop a plan for performing risk assessments for telephone, in-person, and correspondence channels for authentication. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of November 2019, IRS officials stated that they will develop a plan for performing risk assessments for telephone, in-person, and correspondence channels for authentication by May 2020. Until IRS develops and implements this plan, these authentication channels may be more vulnerable to fraudulent activity, including unauthorized attempts to access taxpayer information.

Recommendation: The Commissioner of Internal Revenue should establish a mechanism to collect data on outcomes for telephone, in-person, and correspondence authentication, consistent with federal standards for internal control. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of November 2019, IRS officials stated that the agency intends to implement this recommendation by spring 2020. Officials noted that developing a systemic solution for collecting data on all authentication outcomes is complex and involves multiple IRS business divisions. Until IRS fully addresses this recommendation, it will have limited insight into the number of taxpayers who fail authentication and the reason for failure.

Recommendation: The Commissioner of Internal Revenue should revise or establish, as appropriate, procedures to ensure data quality in the Account Management Services (AMS) consistent with federal standards for internal control. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of November 2019, IRS stated that it has planned enhancements to its authentication data collection procedures in AMS. Officials stated that by June 2020, they intend to implement improvements for ensuring data quality of authentication outcomes. Until IRS fully implements our recommendation, it will be limited in conducting systematic data analysis on taxpayer authentication outcomes.

Recommendation: The Commissioner of Internal Revenue should ensure that IRS business units have access to complete AMS data to monitor authentication performance and identify potential issues. (Recommendation 7)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of November 2019, IRS officials told us that IRS has explored options that will allow the agency to more effectively record, track, and monitor authentication outcomes. IRS officials said that they are developing and testing a tool to document Taxpayer Protection Program interactions, outcomes of taxpayer authentication, and the reasons for authentication failures. Officials stated that IRS plans to have this tool implemented by spring 2020, one year later than originally planned. Officials stated that the delay is due to additional technical programming to fully develop the tool. We will follow up on IRS's actions to determine the extent to which they implement our recommendation.

Recommendation: The Commissioner of Internal Revenue should direct the Identity Assurance Office and other appropriate business partners to develop a plan--including a timeline, milestone dates, and resources needed--for implementing changes to its online authentication programs consistent with new NIST guidance. (Recommendation 8)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: As of January 2020, IRS has taken steps to implement this recommendation. Efforts include developing plans for a new authentication capability to authenticate taxpayer's identities online using external partners, consistent with National Institute of Standards and Technology (NIST) guidance. IRS officials told us that they plan to work with external partners to perform additional testing on its new authentication platform this year, including a usability study to understand user experience. IRS officials also stated that they are determining a schedule for fully implementing these NIST-compliant taxpayer authentication capabilities. IRS's timely implementation of NIST's guidance is critical to help the agency mitigate potential security weaknesses in its existing online authentication programs.

Recommendation: In accordance with the plan developed in Recommendation 8, the Commissioner of Internal Revenue should implement improvements to IRS's systems to fully implement NIST's new guidance. (Recommendation 9)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: As of January 2020, IRS has taken steps to develop plans for a new authentication capability to authenticate taxpayer's identities online using external partners, consistent with National Institute of Standards and Technology (NIST) guidance. IRS officials stated that they are determining a schedule for fully implementing these NIST-compliant taxpayer authentication capabilities. As noted in our report, IRS's timely implementation of NIST's new guidance is critical, as it can help the agency mitigate potential security weaknesses in its existing online authentication programs.

Recommendation: The Commissioner of Internal Revenue should develop a repeatable, comprehensive process to identify and evaluate alternative options for improving taxpayer authentication, including technologies in use by industry, states, or other trusted partners. (Recommendation 10)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of January 2020, the Internal Revenue Service (IRS) had taken steps to develop a repeatable, comprehensive process to identify and evaluate alternative options for improving taxpayer authentication, as GAO recommended in June 2018. IRS stated that the draft process was being reviewed by the Chief Privacy Officer and it expects to finalize the process in spring 2020. IRS also stated that the Identity Assurance office will be ready to use the repeatable process once it is approved by IRS leadership. IRS's continued attention to this action will help ensure that it has a sound rationale for its investment decisions and the resources it needs to make authentication improvements in a timely manner.

Recommendation: Based on the approach developed in Recommendation 10, the Commissioner of Internal Revenue should include and prioritize these options, as appropriate, in IRS's Identity Assurance Strategy and Roadmap. (Recommendation 11)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of January 2020, the Internal Revenue Service (IRS) had taken steps to develop a repeatable, comprehensive process to identify and evaluate alternative options for improving taxpayer authentication. However, IRS had not yet included and prioritized these options, as appropriate, in IRS's Identity Assurance Strategy and Roadmap (Roadmap), as GAO recommended in June 2018. IRS stated that it expects to finalize its process to evaluate alternative authentication options in spring 2020. IRS documentation states that it plans to update its Roadmap annually, but it has not articulated a timeline for doing so in 2020. IRS's continued attention to this action will help ensure that it has a sound rationale for its investment decisions and the resources it needs to make authentication improvements in a timely manner.

Recommendation: The Administrator should direct the Chief Information Officer to address, in conjunction with the Chief Human Capital Officer, gaps in IT workforce planning by fully implementing the eight key IT workforce planning activities noted in this report. (Recommendation 3)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA did not concur with this recommendation. As of October 2019, the agency reported that the Office of the Chief Information Officer was beginning its involvement with the agency's Mission Support Architecture Program which aims at re-aligning mission support functions from a decentralized model to an enterprise model. The office's participation in the re-alignment effort has an estimated completion date in fiscal year 2023.

Recommendation: The Administrator should direct the Chief Information Officer to address weaknesses in oversight practices and ensure routine oversight of all investments by taking action to document criteria for escalating investments among governance boards and establish procedures for tracking corrective actions for underperforming investments. (Recommendation 6)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. In July 2018, NASA reported that the agency intended to address this recommendation by documenting its approach for governing IT investments. In February 2020, NASA reported that the agency remained committed to taking action to address this recommendation and reported that the Office of the Chief Information Officer had established a process to govern IT investment funds and had planned additional modifications for that framework. The agency now expects to complete actions to address this recommendation by November 2020.

Recommendation: The Administrator should ensure that the Chief Information Officer fully defines policies and procedures for developing the portfolio criteria, creating the portfolio, and evaluating the portfolio. (Recommendation 7)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. In July 2018, NASA reported that it had begun updating policies and procedures for developing the portfolio criteria. In April 2019, NASA provided copies of its updated guidance. Among other things, the guidance described criteria for the portfolio and defined policies and procedures for creating the portfolio. As of April 2020, the agency had not yet provided evidence that it had developed policies and procedures for evaluating the portfolio. We plan to continue following up on the status of efforts to address this recommendation.

Recommendation: The Administrator should direct the Chief Information Officer to establish an agency-wide approach to managing cybersecurity risk that includes a cybersecurity strategy that, among other things, makes explicit the agency's risk tolerance, accepted risk assessment methodologies, a process for consistently evaluating risk across the organization, response strategies and approaches for monitoring risk over time, and priorities for risk management investments. (Recommendation 8)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. In July 2018, NASA reported that it had hired a Chief Cybersecurity Risk Officer in April 2018 and that it had also approved a charter for an agency-wide Cybersecurity Integration Team. As of September 2020, NASA reported that it intends to deliver a cybersecurity risk management strategy that addresses the elements outlined in this recommendation by 2021.

Recommendation: The Administrator should direct the Chief Information Officer to establish an agency-wide approach to managing cybersecurity risk that includes policies and procedures with well-defined roles and responsibilities that are integrated and reflect NASA's current security practices and operating environment. (Recommendation 10)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. As of September 2020, NASA reported that the Chief Information Officer had initiated a review of the agency's cyber policy management framework and that any related updates were expected to be completed by 2021.

Recommendation: Congress should consider strengthening schools' accountability for student loan defaults, for example, by 1) revising the cohort default rate (CDR) calculation to account for the effect of borrowers spending long periods of time in forbearance during the 3-year CDR period, 2) specifying additional accountability measures to complement the CDR, for example, a repayment rate, or 3) replacing the CDR with a different accountability measure. (Matter 1)

Agency: Congress
Status: Open

Comments: In the 115th Congress, provisions were included in the Transparency in Student Loan Consultation Act of 2018 (H.R. 6473) to require schools and their default management consultants to provide borrowers with information that is accurate and complete. We will continue to monitor congressional action.

Recommendation: Congress should consider requiring that schools and default management consultants that choose to contact borrowers about their federal student loan repayment and postponement options after they leave school present them with accurate and complete information. (Matter 2)

Agency: Congress
Status: Open

Comments: In the 116th Congress, legislation has been introduced to revise the cohort default rate calculation. The College Affordability Act (H.R. 4674), Acting on the Annual Duplication Report Act of 2019 (S. 2175), and Accountability in Student Loan Data Act (H.R. 4662) include provisions that, if enacted, would revise the cohort default rate calculation to change how borrowers who spend long periods in forbearance are accounted for in the calculation. We will continue to monitor congressional action.

Recommendation: The Chairman of the National Mediation Board should develop and execute a plan to address the rail arbitration case backlog. (Recommendation 1)

Agency: National Mediation Board
Status: Open

Comments: NMB agreed with this recommendation and stated that it is examining the growing arbitration backlog and investigating steps the Board may take to reduce it. In particular, the agency noted that it is discussing proposals with stakeholders and formulating a plan to reduce the backlog in 2018.

Recommendation: The Chairman of the National Mediation Board should develop and implement policies for approval and monitoring of employee requests for outside employment and other outside activities to prevent violations of ethics rules, consistent with Office of Government Ethics standards of conduct and federal internal control standards. (Recommendation 2)

Agency: National Mediation Board
Status: Open

Comments: NMB agreed with this recommendation. The agency stated that it has taken significant steps to investigate this matter and has established new controls in order to prevent this type of activity in the future, including establishing a relationship with the IG of the National Labor Relations Board to operate a telephone hotline and email address for the reporting of suspected fraud, waste and abuse at NMB.

Recommendation: The Chairman of the National Mediation Board should complete and take actions on the organizational climate assessment and survey results as a means to address employee concerns. (Recommendation 3)

Agency: National Mediation Board
Status: Open

Comments: NMB agreed with this recommendation. The agency stated that the Board is concerned that the 2017 Federal Employee Viewpoint Survey revealed a level of dissatisfaction among NMB employees. It plans to conduct an Internal Climate Assessment in 2018 and agency looks forward to the opportunity to better understand and address any employee concerns.

Recommendation: The Chairman of the National Mediation Board should revise NMB's travel policy and develop appropriate internal controls to ensure compliance with federal requirements for travel. (Recommendation 4)

Agency: National Mediation Board
Status: Open

Comments: NMB agreed with this recommendation. The agency stated that it is in the process of reviewing the current travel policy, and will revise the policy to be in compliance with federal travel regulations as necessary.

Recommendation: The Chairman of the National Mediation Board should revise NMB's telework policy and develop appropriate internal controls to ensure compliance with federal requirements for telework. (Recommendation 5)

Agency: National Mediation Board
Status: Open

Comments: NMB agreed with this recommendation and stated that it will revise its telework policy and strengthen internal controls, as necessary.

Recommendation: The Secretary of Defense should ensure that the CMO fully address all requirements in section 911 of the NDAA for Fiscal Year 2017 and incorporate leading practices for effective cross-functional teams in guidance on Secretary of Defense-empowered cross-functional teams. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: DOD concurred with this recommendation. In December 2019, the Secretary of Defense approved DOD's guidance on cross-functional teams. We found that this two-page guidance addresses most, but not all, of the 911 requirements and leading practices for cross-functional teams. Specifically, it addresses in whole or in part six of the seven section 911 requirements and six of the eight leading practices. The Secretary-approved guidance also directs the Chief Management Officer (CMO) to develop more detailed implementing guidance. According to an Office of the CMO (OCMO) official, OCMO plans to use previously drafted terms of reference as the basis for the CMO's more detailed implementing guidance. Based on our review, when the Secretary of Defense approved guidance is considered along with the draft terms of reference expected to serve as detailed implementing guidance, both documents will fully address all section 911 requirements and leading practices for effective cross-functional teams. To fully implement this recommendation, the CMO will need to develop and issue this detailed implementing guidance to fully address section 911 requirements and our leading practices for effective cross-functional teams. According to an OCMO official, as of April 2020, OCMO was still in the process of developing the detailed implementing guidance.

Recommendation: The Secretary of Defense should ensure that the CMO either: (a) provide training for presidentially-appointed, Senate-confirmed individuals in the Office of the Secretary of Defense that includes the required elements--leadership, modern organizational practice, and collaboration--in section 911 of the NDAA for Fiscal Year 2017, or (b) develop criteria for obtaining a waiver and have the Secretary of Defense request such a waiver from the President for these required elements if the individual possesses--through training and experience--the skill and knowledge otherwise to be provided through a course of instruction. (Recommendation 4)

Agency: Department of Defense
Status: Open

Comments: DOD concurred with this recommendation. In October 2018, an official from the Office of the Chief Management Officer (OCMO) stated that OCMO had revised the draft training curriculum for individuals filling presidentially-appointed, Senate-confirmed positions in the Office of the Secretary of Defense to include all of the required elements in section 911. According to an OCMO official, as of April 2020, the curriculum had been approved and the training had been provided, but as of July 2020, the department had not provided documentation of the updated curriculum or of the training being provided. To fully implement this recommendation, we will need to review the revised training curriculum to determine if it contains all of the required elements in section 911 and obtain documentation that presidential appointees in the Office of the Secretary of Defense have received the training or were granted training waivers.

Recommendation: The Commissioner of FDA should ensure that the FVM Program develops performance measures with associated targets and time frames for all eight of FDA's food safety- and nutrition-related objectives. (Recommendation 2)

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: As of August 2020, FDA had not fully implemented our recommendation, although the agency reported taking several steps. For example, FDA stated that implementation of Food Safety Modernization Act (FSMA) based preventive controls standards is a top priority for the agency and a key component of the Foods and Veterinary Medicine Program's strategic plan, and for this reason, FSMA-related performance metrics have been prioritized. In addition, FDA reported that in September 2019, the agency published an online Food Safety Dashboard, whose purpose is to measure the progress of each of the FSMA rules, and FDA provides regular updates to the dashboard to promote transparency to the public. FDA also stated that as of June 2020, the dashboard contains measures related to Preventive Controls and Current Good Manufacturing Practice Rules and Imported Food Safety Program, and it includes data for human and animal food and, in some cases, data starting in FY 2017. FDA added that since the FSMA rules have staggered compliance dates, the measures associated with the rules are developed in phases, and over time, the Food Safety Dashboard will be populated with additional data to show more FSMA-related outcomes. However, the recommendation is not fully implemented since our recommendation included the related objectives within the Foods and Veterinary Medicine Program's strategic plan. In August 2020, FDA told us that given the agency's 2018 reorganization, FDA has aligned the performance measures and dashboard with the FSMA rules, and the current alignment covers most of the food safety objectives within the strategic plan. FDA also reported that it is reviewing the strategic plan to ensure alignment with FDA's current priorities and structure, including the recently released New Era of Smarter Food Safety Blueprint. We will follow up with FDA and provide an update in FY 2021.

Recommendation: The Acting Commissioner of Internal Revenue should assess options for improving enforcement of late W-2 filing penalties, for example, by mailing notices before the next filing deadline. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of October 2019, IRS continues to disagree with this recommendation. IRS stated that it does not have all the information required for calculating and sending late penalty notifications prior to the beginning of the next filing season. However, in its response, IRS did not consider other options that could be available prior to finalizing penalty calculations, such as communicating with the employers earlier in the process. As noted in our report, quickly responding to employers that filed late increases the potential for compliance, thereby increasing the availability of W-2 data for systemic verification to detect and prevent fraud and noncompliance. We continue to believe that assessing the options for improving enforcement of late W-2 filing penalties, such as through earlier communication, would help IRS identify potential opportunities to encourage compliance with the W-2 filing deadline and verify more wage information before releasing refunds. We will continue to discuss options with IRS regarding this recommendation.

Recommendation: The Acting Commissioner of Internal Revenue should develop an evaluation plan to fully assess the benefits and costs, including taxpayer burden, of modifying the February 15 refund hold, and determine how this effort informs IRS's overall compliance strategy for refundable tax credits and fraud risk management. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of January 2020, IRS has assessed the benefits of modifying the refund hold, but it has not assessed the costs, as GAO recommended in January 2018. In November 2018, IRS provided its assessment of the February 15 refund hold. In it, IRS reiterated its findings regarding the benefits of the refund hold. These benefits included potential savings if IRS modified the hold to include all taxpayers, extended the hold to a later date when more W-2 data are available, or made both changes. However, IRS did not include any assessment of costs to achieve these potential savings, such as the costs for IRS to review any additional returns that would be identified under a modified refund hold. It did not assess taxpayer burden, either. IRS also did not determine how the February 15 refund hold informs IRS's overall compliance strategy for refundable tax credits and its fraud risk management strategy. In January 2019, IRS took actions to hold more returns beyond the February 15 refund hold date using a risk-based selection method. Nevertheless, without a complete assessment of the benefits and costs, including taxpayer burden, IRS is making a decision based upon incomplete information. Further, if Congress or Treasury considered making any changes, they too would have incomplete information on which to direct IRS's actions.

Recommendation: Based on the benefits and costs assessment in Recommendation 3, the Acting Commissioner of Internal Revenue should use IRS's existing authority to modify the refund hold such that it minimizes the risk of releasing fraudulent or noncompliant refunds. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: As of January 2020, IRS has taken actions consistent with our recommendations by modifying its filters to hold more returns claiming the Earned Income Tax Credit (EITC) or Additional Child Tax Credit (ACTC) beyond the February 15 refund hold date based on a risk-based selection method. In addition, in May 2019, IRS officials told us they are making similar changes for the 2020 filing season to hold more high-risk returns not claiming EITC or ACTC until W-2 data are available. This action, if taken, would be consistent with our recommendations. In 2018, IRS assessed the benefits of modifying the refund hold, however, it did not assess or document the costs, including taxpayer burden, or determine how the February 15 refund hold informs IRS's overall compliance strategy for refundable tax credits and its fraud risk management strategy. Completing these actions, along with the planned modifications, would fully address our recommendations, which would enable IRS to make decisions based on completed information.

Recommendation: The Acting Commissioner of Internal Revenue should assess the benefits and costs of additional uses and applications of W-2 data for pre-refund compliance checks, such as addressing underreporting, employment fraud, and other fraud or noncompliance before issuing refunds. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2019, IRS provided results for a pilot encouraging voluntary compliance through expanded systemic verification using W-2 data. In the pilot, IRS sent soft notices to a targeted group of taxpayers whose returns under-reported income compared to W-2 data. In its analysis, IRS reported that some taxpayers voluntarily amended their returns after receiving the soft notice, resulting in a net increase in tax revenue. If IRS determines that the benefits outweigh the costs of adopting this practice based on the pilot results, or assesses additional options to address other fraud and noncompliance before issuing refunds, it would satisfy our recommendation. We will continue to follow IRS's progress on the pilot and its results.

Recommendation: Based on the assessment in Recommendation 5, the Acting Commissioner of Internal Revenue should implement any identified changes to improve pre-refund compliance checks. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2019, IRS provided an evaluation of a pilot it conducted during tax year 2019. In the pilot, IRS sent soft notices to a targeted group of taxpayers whose returns under-reported income compared to W-2 data. In its analysis, IRS reported that some taxpayers voluntarily amended their returns after receiving the soft notice, resulting in a net increase in tax revenue. IRS told us they intend to continue the pilot during tax year 2020. We will continue to follow IRS's progress on the pilot and its results.

Recommendation: To enhance enterprise-wide biometric strategic planning, the Under Secretary of Defense for Acquisition, Technology, and Logistics should publish a supporting biometric implementation plan that includes intended outcomes, measures of effectiveness, and responsibilities, among other things.

Agency: Department of Defense: Office of the Secretary of Defense: Office of the Under Secretary of Defense for Acquisition, Technology, and Logistics
Status: Open

Comments: DOD agreed with the recommendation. As of September 2019, DOD indicated that it has begun taking action to implement it. We will update the status of this recommendation once we confirm the actions DOD has taken.

Recommendation: To facilitate more effective and efficient acquisition management of DOD's biometric and forensic enterprises, the Secretary of the Army, in coordination with the Under Secretary of Defense for Acquisition, Technology, and Logistics, should complete a disposition analysis for the Near Real Time Identity Operations solution before the solution reaches operation and sustainment.

Agency: Department of Defense: Department of the Army
Status: Open

Comments: DOD agreed with the recommendation. As of September 2019, DOD indicated that it has begun taking action to implement it. We will update the status of this recommendation once we confirm the actions DOD has taken.

Recommendation: To facilitate more effective and efficient acquisition management of DOD's biometric and forensic enterprises, the Secretary of the Army, in coordination with the Under Secretary of Defense for Acquisition, Technology, and Logistics, should consider including geographic dispersal as part of the selection criteria for the DOD Automated Biometric Information System (ABIS) follow-on system.

Agency: Department of Defense: Department of the Army
Status: Open

Comments: DOD agreed with the recommendation. As of September 2019, DOD indicated that it has begun taking action to implement it. We will update the status of this recommendation once we confirm the actions DOD has taken.

Recommendation: To reduce uncertainty and provide FHFA sufficient direction for carrying out its responsibilities as conservator of the enterprises, Congress should consider legislation that establishes objectives for the future federal role in housing finance, including the structure of the enterprises, and a transition plan to a reformed housing finance system that enables the enterprises to exit conservatorship.

Agency: Congress
Status: Open

Comments: As of March 16, 2020, Congress has not taken action on this matter.

Recommendation: To ensure that the department can implement readiness rebuilding efforts, the Secretary of Defense should direct the Secretaries of the Departments of the Army, the Navy, and the Air Force to establish comprehensive readiness rebuilding goals to guide readiness rebuilding efforts and a strategy for implementing identified goals, to include resources needed to implement the strategy.

Agency: Department of Defense
Status: Open
Priority recommendation

Comments: DOD partially concurred with the recommendation in our draft report. In our draft, we recommended that the Secretary of Defense provide direction to the U.S. Marine Corps, in addition to the Secretary of the Navy; DOD stated that separate guidance to the U.S. Marine Corps was unnecessary because the U.S. Marine Corps is part of the Department of the Navy. We agreed, and revised our recommendation as we finalized our report for publishing. Otherwise, in its comments on this recommendation, DOD noted that the department was currently working to define the "ready for what" for the military services which would provide the target for their readiness recovery goals. Since we reported in 2016, the military services established both readiness rebuilding goals and a strategy for implementing them. Through the department's Readiness Recovery Framework, the military services have identified key readiness issues that their respective forces face and actions to address these issues. These efforts are detailed every other quarter in reports to Congress. Since the establishment of the Readiness Recovery Framework, the military services have been revising their readiness rebuilding goals. GAO will continue to monitor their evolution, as well as the progress of DOD's Readiness Recovery Framework, before it closes this recommendation as implemented.

Recommendation: In order to more fully implement key practices and meet requirements and to better institutionalize standards and practices, the Secretary of HUD should establish a process and schedule for regularly reviewing, revising, and updating HUD's human capital strategic plan, strategic workforce plan, and succession plan.

Agency: Department of Housing and Urban Development
Status: Open

Comments: In response to our recommendation, HUD developed an internal management calendar and associated standard operating procedures. The purpose of the management calendar is to document recurring processes of program offices across the agency, assist in planning and managing the agency's deliverables to ensure that critical deadlines are met, and provide information on ongoing reporting requirements occurring across the agency. We will determine whether HUD has fully implemented our recommendation when the agency provides documentation showing how the management calendar is used for updating human capital, workforce, and succession plans.

Recommendation: In order to more fully implement key practices and meet requirements and to better institutionalize standards and practices, the Secretary of HUD should establish a process and schedule for reviewing and updating policies and procedures to help ensure that policies and procedures for key management functions remain current and complete.

Agency: Department of Housing and Urban Development
Status: Open

Comments: In response to our recommendation, HUD developed an internal management calendar and associated standard operating procedures. The purpose of the management calendar is to document recurring processes of program offices across the agency, assist in planning and managing the agency's deliverables to ensure that critical deadlines are met, and provide information on ongoing reporting requirements occurring across the agency. We will determine whether HUD has fully implemented our recommendation when the agency provides documentation showing how the management calendar is used for updating policies and procedures for key management functions.

Recommendation: To enhance DOD's ability to make consistent and informed decisions in its management of the TCC program in accordance with internal control standards, the Under Secretary of Defense for Acquisition, Technology and Logistics should require the Director, Corrosion Policy and Oversight Office, to document the procedures for approving projects within the TCC program for civilian institutions.

Agency: Department of Defense: Office of the Under Secretary of Defense for Acquisition, Technology and Logistics
Status: Open

Comments: DOD did not agree with the recommendation. In 2016, DOD's Corrosion Office consistently maintained that its existing process is adequately documented in the DOD Corrosion Prevention and Mitigation Strategic Plan and the Technical Corrosion Collaboration (TCC) Definitions Document. However, GAO maintained that DOD could enhance its oversight of corrosion projects by documenting how it approves projects for civilian institutions. As of March 2019, DOD has since decided to take action to implement this recommendation. Specifically, the Corrosion Office plans to include information on documenting procedures for approving projects in a new DOD manual on corrosion that it has a goal of creating by the end of calendar year 2020. We will monitor the extent to which DOD implements this recommendation

Recommendation: To enhance DOD's ability to make consistent and informed decisions in its management of the TCC program in accordance with internal control standards, the Under Secretary of Defense for Acquisition, Technology and Logistics should require the Director, Corrosion Policy and Oversight Office, to document the procedures for selecting and approving projects within the TCC program for military academic institutions.

Agency: Department of Defense: Office of the Under Secretary of Defense for Acquisition, Technology and Logistics
Status: Open

Comments: DOD did not agree with the recommendation. In 2016, DOD's Corrosion Office had consistently maintained that its existing process is adequately documented in the DOD Corrosion Prevention and Mitigation Strategic Plan and the Technical Corrosion Collaboration (TCC) Definitions Document. However, GAO maintained that DOD could enhance its oversight of corrosion projects by documenting how it selects and approves TCC projects for military academic institutions. As of March 2019, DOD has since decided to take action to implement this recommendation. The Corrosion Office plans to include information on documenting procedures for selecting and approving projects in a new DOD manual on corrosion that it has a goal of creating by the end of calendar year 2020. We will monitor the extent to which DOD implements this recommendation.

Recommendation: To enhance DOD's ability to make consistent and informed decisions in its management of the TCC program in accordance with internal control standards, the Under Secretary of Defense for Acquisition, Technology and Logistics should require the Director, Corrosion Policy and Oversight Office, to document the procedures for selecting and approving military research labs supporting civilian and military institutions in conducting projects within the TCC program.

Agency: Department of Defense: Office of the Under Secretary of Defense for Acquisition, Technology and Logistics
Status: Open

Comments: DOD partially concurred with our recommendation. As of August 2018, the Corrosion Policy and Oversight office is currently re-writing Appendix A of the "Technical Corrosion Collaboration (TCC)" document to include steps and grading criteria for decision makers when selecting and approving military research labs supporting civilian and military institutions conducting projects with the TCC program. The Corrosion Policy and Oversight office will complete this re-write and the post procedures to their web site by November 30, 2018. As of March 2019, the Corrosion Policy and Oversight office plans to include procedures for selecting and approving labs to support institutions in a new DOD manual on corrosion. Its goal to create this new manual is by the end of calendar year 2020. We will monitor the extent to which DOD implements this recommendation.

Recommendation: When such revisions are made, the Director of OMB should work with the Performance Improvement Council to test and implement these provisions.

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: As of October 2020, OMB has not yet taken action to address this recommendation. According to information provided by OMB and PIC staff in June 2015, although OMB revised its guidance as we recommended, it did not work with the PIC to test implementation of these provisions. Instead, they told us that both PIC and OMB staff ensure agencies are implementing these provisions of their guidance when reviewing agency priority goal (APG) quarterly update submissions. However, our analyses of agencies' APG updates since that time has continued to find that implementation of these provisions is mixed. We will continue to monitor progress.

Recommendation: In addition, as OMB works with agencies to enhance Performance.gov to include additional information about APGs, the Director of OMB should ensure that agencies adhere to OMB's guidance for website updates by providing a description of how input from congressional consultations was incorporated into each APG.

Agency: Executive Office of the President: Office of Management and Budget
Status: Open

Comments: As of October 2020, OMB has taken limited actions to address this recommendation. In July 2017, OMB staff said that they planned on highlighting the requirement for congressional consultation as they updated the 2018-2019 APGs, which were first published in February 2018 and were updated quarterly. However, our periodic analyses of Performance.gov showed that neither the updated version of the site, nor the reporting templates for individual APGs, contained a space for providing a description of input from Congress. In its July 2020 guidance, OMB directed agencies to highlight congressional input, if such input was relevant to setting a specific goal, in the APG overview section of the template. We will continue to monitor progress.