Recommendation: The Secretary of Defense should ensure that the DOD CIO takes appropriate steps to ensure implementation of the DC3I tasks. (Recommendation 1)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open
Priority recommendation

Comments: The Department of Defense partially concurred with this recommendation. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should ensure that DOD components develop plans with scheduled completion dates to implement the four remaining CDIP tasks overseen by DOD CIO. (Recommendation 2)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open
Priority recommendation

Comments: The Department of Defense partially concurred with this recommendation. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should ensure that the Deputy Secretary of Defense identifies a DOD component to oversee the implementation of the seven CDIP tasks not overseen by DOD CIO and report on progress implementing them. (Recommendation 3)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open
Priority recommendation

Comments: The Department of Defense did not concur with this recommendation. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should ensure that DOD components accurately monitor and report information on the extent that users have completed the Cyber Awareness Challenge training as well as the number of users whose access to the network was revoked because they have not completed the training. (Recommendation 4)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open

Comments: The Department of Defense partially concurred with this recommendation. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should ensure that the DOD CIO ensures all DOD components, including DARPA, require their users to take the Cyber Awareness Challenge training developed by DISA. (Recommendation 5)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open

Comments: The Department of Defense concurred with this recommendation. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should direct a component to monitor the extent to which practices are implemented to protect the department's network from key cyberattack techniques. (Recommendation 6)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open
Priority recommendation

Comments: The Department of Defense did not concur with this recommendation. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should ensure that the DOD CIO assesses the extent to which senior leaders' have more complete information to make risk-based decisions—and revise the recurring reports (or develop a new report) accordingly. Such information could include DOD's progress on implementing (a) cybersecurity practices identified in cyber hygiene initiatives and (b) cyber hygiene practices to protect DOD networks from key cyberattack techniques. (Recommendation 7)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open
Priority recommendation

Comments: The Department of Defense partially concurred with this recommendation. When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should ensure that the Chief Management Officer identify and document specific implementation steps to advance a collaborative culture, consistent with our leading practices for mergers and organizational transformations.

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open

Comments: DOD concurred with this recommendation. In its concurrence, DOD stated that it intended to identify and document specific implementation steps to advance a collaborative culture through, among other things, the Chief Management Officer's forthcoming detailed implementing guidance on Secretary of Defense-empowered cross-functional teams and revisions to the DOD issuance regarding senior governance forums that are intended to advance a collaborative culture. As of July 2020, these efforts were still in progress, according to an OCMO official. We will continue to monitor DOD's efforts to address this recommendation.

Recommendation: The Secretary of Defense should ensure that the Chief Management Officer establishes a process for identifying and prioritizing available funding to develop and implement initiatives from the cross-functional reform teams. (Recommendation 1)

Agency: Department of Defense
Status: Open
Priority recommendation

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of OPM, in consultation with the Chief Human Capital Officers (CHCO) Council, should establish and implement a process for regularly updating the performance management website to include all available guidance and resources, making this information easily accessible, and providing links to other related websites. (Recommendation 1)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM agreed with this recommendation. As of January 2020, OPM stated that they had identified available guidance and resources and updated the OPM Performance Management website. Additionally, OPM stated that they were establishing and documenting a process, which will be documented via standard operating procedures, to regularly update the performance management website with available guidance and resources. To fully address this recommendation, OPM needs to implement that process, which it indicated it plans to do by the end of fiscal year 2020.

Recommendation: The Director of OPM, in consultation with the CHCO Council, should develop and implement a mechanism for agencies to routinely and independently share promising practices and lessons learned, such as through allowing agencies to post such information on OPM's Performance Management portal. (Recommendation 2)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM agreed with this recommendation. As of January 2020, OPM stated that they had developed and implemented a mechanism for agencies to routinely and independently share promising practices and lessons learned on OPM's Performance Management Portal and would evaluate its effectiveness moving forward. To fully implement the recommendation. OPM stated they are continuing to engage agency stakeholders and evaluate the effectiveness of their efforts. OPM stated they plan to be able to to close this recommendation during fiscal year 2020.

Recommendation: The Director of OPM, in consultation with the CHCO Council, should develop a strategic approach for identifying and sharing emerging research and innovations in performance management. (Recommendation 3)

Agency: Office of Personnel Management
Status: Open
Priority recommendation

Comments: OPM agreed with this recommendation. As of January 2020, OPM stated that it is working with OMB, Cross-Agency Priority Goal Leaders, and other representatives from across government to develop a comprehensive strategic approach for identifying and sharing emerging research and innovations. According to OPM, the next working group meeting is scheduled for the summer of 2020. As of January 2020, OPM stated they are implementing certain strategic approaches for identifying and sharing emerging research and innovations in performance management. OPM stated they are also developing a white paper on agency reskilling efforts, likely focusing on engagement and retention, which would better position supervisors to engage in innovative performance management practices on a routine basis. OPM stated they aim to to close this recommendation by the end of the calendar year.

Recommendation: The Secretary of Homeland Security should direct Homeland Security's members of the interagency working group for protection of Native American cultural property to implement selected leading collaboration practices, such as taking steps to agree on outcomes and objectives, clarify roles and responsibilities, and document these decisions. (Recommendation 1)

Agency: Department of Homeland Security
Status: Open

Comments: As of August 2019, we have reached out to the Department of Homeland Security and are awaiting a response on actions they may have taken in response to this recommendation.

Recommendation: The Secretary of the Interior should direct Interior's members of the interagency working group for protection of Native American cultural property to implement selected leading collaboration practices, such as taking steps to agree on outcomes and objectives, clarify roles and responsibilities, and document these decisions. (Recommendation 2)

Agency: Department of the Interior
Status: Open

Comments: Since August 2018, Interior's Office of International Affairs has updated its contact list for international repatriation assistance with information on the Department's roles and responsibilities in support of international repatriation. In addition, Interior's interagency working group members have developed a description of the interagency working group. However, the statement does not include outcomes and objectives for the group's work. GAO made the same recommendation to each of the four agencies covered in the review because implementing leading collaboration practices will require the collective participation of group members. GAO will keep the recommendation open until further collaborative actions are taken.

Recommendation: The Attorney General should direct Justice's members of the interagency working group for protection of Native American cultural property to implement selected leading collaboration practices, such as taking steps to agree on outcomes and objectives, clarify roles and responsibilities, and document these decisions. (Recommendation 3)

Agency: Department of Justice
Status: Open

Comments: As of August 2019, we have reached out to the Department of Justice and are awaiting a response on actions they may have taken in response to this recommendation.

Recommendation: The Secretary of State should direct State's members of the interagency working group for protection of Native American cultural property to implement selected leading collaboration practices, such as taking steps to agree on outcomes and objectives, clarify roles and responsibilities, and document these decisions. (Recommendation 4)

Agency: Department of State
Status: Open

Comments: Since August 2018, the Department of State shared a statement of its roles and responsibilities with other working group members. However, the statement does not include outcomes and objectives for the group's work. GAO made the same recommendation to each of the four agencies covered in the review because implementing leading collaboration practices will require the collective participation of group members. GAO will keep the recommendation open until further collaborative actions are taken.

Recommendation: The Secretary of Homeland Security should direct Homeland Security's members of the interagency working group for protection of Native American cultural property to identify and externally communicate to tribes points of contact within the agency that are responsible for responding to tribes' requests for assistance with repatriating cultural items from overseas auctions. (Recommendation 5)

Agency: Department of Homeland Security
Status: Open

Comments: As of August 2019, we have reached out to the Department of Homeland Security and are awaiting a response on actions they may have taken in response to this recommendation.

Recommendation: The Attorney General should direct Justice's members of the interagency working group for protection of Native American cultural property to identify and externally communicate to tribes points of contact within the agency that are responsible for responding to tribes' requests for assistance with repatriating cultural items from overseas auctions. (Recommendation 7)

Agency: Department of Justice
Status: Open

Comments: As of August 2019, we have reached out to the Department of Justice and are awaiting a response on actions they may have taken in response to this recommendation.

Recommendation: The Secretary of Homeland Security should direct Homeland Security's members of the interagency working group for protection of Native American cultural property to collaborate with the interagency working group members from other agencies to assess, in consultation with Indian tribes, whether and how amending the U.S. legal framework governing the export, theft, and trafficking of Native American cultural items would facilitate the repatriation of these items from auctions overseas and report its findings to Congress. (Recommendation 9)

Agency: Department of Homeland Security
Status: Open

Comments: As of August 2019, we have reached out to the Department of Homeland Security and are awaiting a response on actions they may have taken in response to this recommendation.

Recommendation: The Secretary of the Interior should direct Interior's members of the interagency working group for protection of Native American cultural property to collaborate with the interagency working group members from other agencies to assess, in consultation with Indian tribes, whether and how amending the U.S. legal framework governing the export, theft, and trafficking of Native American cultural items would facilitate the repatriation of these items from auctions overseas and report its findings to Congress. (Recommendation 10)

Agency: Department of the Interior
Status: Open

Comments: As of September 2019, Interior is working to develop an assessment of legislative options for discussion with the interagency working group, and plans to meet with tribes later this fall to discuss the assessment. Interior anticipates a September 30, 2020, completion date for the assessment of these legislative options. Interior has also reviewed legislative proposals related to the export, theft, and trafficking of Native American cultural items and has prepared for Congressional hearings on this topic.

Recommendation: The Attorney General should direct Justice's members of the interagency working group for protection of Native American cultural property to collaborate with the interagency working group members from other agencies to assess, in consultation with Indian tribes, whether and how amending the U.S. legal framework governing the export, theft, and trafficking of Native American cultural items would facilitate the repatriation of these items from auctions overseas and report its findings to Congress. (Recommendation 11)

Agency: Department of Justice
Status: Open

Comments: As of August 2019, we have reached out to the Department of Justice and are awaiting a response on actions they may have taken in response to this recommendation.

Recommendation: The Secretary of State should direct State's members of the interagency working group for protection of Native American cultural property to collaborate with the interagency working group members from other agencies to assess, in consultation with Indian tribes, whether and how amending the U.S. legal framework governing the export, theft, and trafficking of Native American cultural items would facilitate the repatriation of these items from auctions overseas and report its findings to Congress. (Recommendation 12)

Agency: Department of State
Status: Open

Comments: In November 2019, the Department of State, in conjunction with other interagency working group members, circulated a draft legal assessment and draft legislative options. The interagency working group members conducted a listening session with tribal members in November 2019, and conducted a tribal consultation in January 2020. GAO will continue monitoring the agencies' efforts toward implementing this recommendation.

Recommendation: The acting Bank president and Board chairman should ensure that the Bank evaluates and implements methods to further promote and sustain an antifraud tone that permeates the Bank's organizational culture, as described in GAO's Fraud Risk Framework. This should include consideration of requiring training on fraud risks relevant to Bank programs, for new employees and all employees on an ongoing basis, with the training to include identifying roles and responsibilities in fraud risk management activities across the Bank. (Recommendation 1)

Agency: Export-Import Bank of the United States
Status: Open

Comments: In November 2019, EXIM told us it continues work in this area and will provide us information on this work as it is completed. We will continue to monitor EXIM's progress in this area.

Recommendation: The acting Bank president and Board chairman should ensure that the Bank develops and implements an antifraud strategy with specific control activities, based upon the results of fraud risk assessments and a corresponding fraud risk profile, as provided in GAO's Fraud Risk Framework. (Recommendation 4)

Agency: Export-Import Bank of the United States
Status: Open

Comments: In November 2019, EXIM told us it was in the final stages of its process for completing its antifraud strategy. We will continue to monitor EXIM's efforts in this area.

Recommendation: The acting Bank president and Board chairman should ensure that the Bank identifies, and then implements, the best options for sharing more fraud-related information--including details of fraud case referrals and outcomes--among Bank staff, to help build fraud awareness, as described in GAO's Fraud Risk Framework. (Recommendation 5)

Agency: Export-Import Bank of the United States
Status: Open

Comments: In November 2019, EXIM stated that it is continuing to work with its Inspector General to implement this recommendation. We will continue to monitor EXIM's progress in this area.

Recommendation: The acting Bank president and Board chairman should lead efforts to collaborate with the Bank's OIG to identify a feasible, cost-effective means to systematically track outcomes of fraud referrals from the Bank to the OIG, including creating a means to link the OIG's proven cases of fraud to the specific Bank transactions from which the OIG actions arose. If any such means are found to be feasible and cost-effective, the acting Bank president and Board chairman should direct appropriate staff to implement them, with such information to be used for purposes consistent with GAO's Fraud Risk Framework, such as data analytics. (Recommendation 6)

Agency: Export-Import Bank of the United States
Status: Open

Comments: In November 2019, EXIM stated that it is continuing to work with its Inspector General to implement this recommendation. We will continue to monitor EXIM's progress in this area.

Recommendation: The acting Bank president and Board chairman should ensure that the Bank monitors and evaluates outcomes of fraud risk management activities, using a risk-based approach and outcome-oriented metrics, and that it subsequently adapts antifraud activities or implements new ones, as determined to be appropriate and consistent with GAO's Fraud Risk Framework. (Recommendation 7)

Agency: Export-Import Bank of the United States
Status: Open

Comments: In November 2019, EXIM stated that it is continuing work to implement this recommendation. We will continue to monitor EXIM's progress in this area.

Recommendation: The Secretary of Defense should ensure that the CMO fully address all requirements in section 911 of the NDAA for Fiscal Year 2017 and incorporate leading practices for effective cross-functional teams in guidance on Secretary of Defense-empowered cross-functional teams. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: DOD concurred with this recommendation. In December 2019, the Secretary of Defense approved DOD's guidance on cross-functional teams. We found that this two-page guidance addresses most, but not all, of the 911 requirements and leading practices for cross-functional teams. Specifically, it addresses in whole or in part six of the seven section 911 requirements and six of the eight leading practices. The Secretary-approved guidance also directs the Chief Management Officer (CMO) to develop more detailed implementing guidance. According to an Office of the CMO (OCMO) official, OCMO plans to use previously drafted terms of reference as the basis for the CMO's more detailed implementing guidance. Based on our review, when the Secretary of Defense approved guidance is considered along with the draft terms of reference expected to serve as detailed implementing guidance, both documents will fully address all section 911 requirements and leading practices for effective cross-functional teams. To fully implement this recommendation, the CMO will need to develop and issue this detailed implementing guidance to fully address section 911 requirements and our leading practices for effective cross-functional teams. According to an OCMO official, as of April 2020, OCMO was still in the process of developing the detailed implementing guidance.

Recommendation: The Secretary of Defense should ensure that the CMO either: (a) provide training for presidentially-appointed, Senate-confirmed individuals in the Office of the Secretary of Defense that includes the required elements--leadership, modern organizational practice, and collaboration--in section 911 of the NDAA for Fiscal Year 2017, or (b) develop criteria for obtaining a waiver and have the Secretary of Defense request such a waiver from the President for these required elements if the individual possesses--through training and experience--the skill and knowledge otherwise to be provided through a course of instruction. (Recommendation 4)

Agency: Department of Defense
Status: Open

Comments: DOD concurred with this recommendation. In October 2018, an official from the Office of the Chief Management Officer (OCMO) stated that OCMO had revised the draft training curriculum for individuals filling presidentially-appointed, Senate-confirmed positions in the Office of the Secretary of Defense to include all of the required elements in section 911. According to an OCMO official, as of April 2020, the curriculum had been approved and the training had been provided, but as of July 2020, the department had not provided documentation of the updated curriculum or of the training being provided. To fully implement this recommendation, we will need to review the revised training curriculum to determine if it contains all of the required elements in section 911 and obtain documentation that presidential appointees in the Office of the Secretary of Defense have received the training or were granted training waivers.