Recommendation: The Chairman of FCC should direct and coordinate with the Chief Executive Officer of USAC to comprehensively assess fraud risks to the E-rate program, including implementing their respective plans for developing periodic fraud risk assessments, examining the suitability of existing fraud controls, and compiling fraud risk profiles following the timelines described in this report. The assessments should be informed by the key fraud risks identified in this report from closed court cases, prior risk assessments, and OIG reports, among other sources. (Recommendation 1)

Agency: Federal Communications Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Chairman of FCC should ensure that FCC and USAC follow the leading practices in GAO's Fraud Risk Framework when designing and implementing data-analytics activities to prevent and detect fraud as part of their respective antifraud strategies for the E-rate program. (Recommendation 2)

Agency: Federal Communications Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Chairman of FCC should direct the Chief Executive Officer of USAC to clearly define and fully document the data fields in all relevant E-rate program computer systems to help improve FCC's ability to understand and use data to manage fraud risks. (Recommendation 3)

Agency: Federal Communications Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: SBA's Associate Administrator for Government Contracting and Business Development should develop a central repository for PCRs to store the supporting documentation for the data they report on their activities. (Recommendation 1)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: SBA's Associate Administrator for Government Contracting and Business Development should ensure that SBA submits required reports to Congress on PCRs' assignments and activities. (Recommendation 2)

Agency: Small Business Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should document measurable objectives for using data in selecting exempt organization returns for examination. (Recommendation 1)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should document and consistently use clear criteria and decision rules on assigning point values to queries, using categories and sliding scales. (Recommendation 2)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should require a regular review of query descriptions and programming to ensure their accuracy and minimize queries that flag the same or similar compliance issue. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should develop procedures and criteria to test new queries prior to implementation in the models. (Recommendation 4)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should more fully document how TE/GE processes data and uses data to make examination selection decisions for sources outside of the model such as research projects and other projects that use queries. (Recommendation 5)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should conduct an analysis to identify the optimal interval between model runs. (Recommendation 6)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should establish a process for regularly evaluating selection decisions and related outcomes for the models and other processes that use data to select returns for examinations. (Recommendation 7)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should document consideration or action on recommendations from its 2018 and 2020 contractor assessments. (Recommendation 8)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should document how score and query data for all returns in the models will continue to be saved over the long term. (Recommendation 9)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should ensure that historical data on examination outcomes are consistently defined and used when doing analysis of examination outcomes. (Recommendation 10)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should routinely analyze the reasons for not examining selected returns and identify any necessary actions to address the reasons. (Recommendation 11)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should annually review and update procedures as needed in relevant IRM sections on examination selection and issue interim guidance until the affected IRM sections are updated. (Recommendation 12)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commissioner of Internal Revenue should document why TE/GE has not identified any risks in its risk register for using data to select exempt organization returns for examination. If risks are subsequently identified, TE/GE should document how it plans to analyze and address them. (Recommendation 13)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Energy should direct DOE's Office of the Chief Financial Officer to revise DOE's PILT order to require DOE to maintain documentation of key determinants of PILT payments for each community to help ensure that payments are consistent with the agreed-upon bases of PILT payments and PILT goals. (Recommendation 1)

Agency: Department of Energy
Status: Open

Comments: In May 2020, DOE officials told us that DOE convened a working group to identify high-level options for the PILT program and recommend appropriate changes to DOE leadership. According to DOE officials, the working group will consider GAO's findings and recommendations.

Recommendation: The Secretary of Energy should direct DOE's Office of the Chief Financial Officer to revise DOE's PILT order to require DOE site offices to review key determinants of PILT payments in communities' PILT invoices for accuracy and consistency with the agreed-upon bases of PILT payments and PILT goals and for DOE headquarters to document its review and validation of site office determinations. (Recommendation 2)

Agency: Department of Energy
Status: Open

Comments: In May 2020, DOE officials told us that DOE convened a working group to identify high-level options for the PILT program and recommend appropriate changes to DOE leadership. According to DOE officials, the working group will consider GAO's findings and recommendations.

Recommendation: The Secretary of Energy should direct DOE's Office of the Chief Financial Officer to revise DOE's PILT order to provide additional guidance on how communities should calculate their payment requests for their PILT invoices. (Recommendation 3)

Agency: Department of Energy
Status: Open

Comments: In May 2020, DOE officials told us that DOE convened a working group to identify high-level options for the PILT program and recommend appropriate changes to DOE leadership. According to DOE officials, the working group will consider GAO's findings and recommendations.

Recommendation: The Assistant Secretary of State for Consular Affairs should provide additional training or related resources to consular officers and locally employed staff on adjudicating E-2 visas, to cover topics that include the E-2 eligibility requirements and understanding business- and tax-related documents. (Recommendation 1)

Agency: Department of State
Status: Open

Comments: Department of State officials stated in January 2020 that the department plans to address this recommendation by increasing the frequency and specificity of E-2 content through webinars, workshops, and cables. The Department of State also plans to develop subject matter experts on business and tax related documents that can provide consultative services on an as-needed basis. As of July 2020, Department of State officials said that they had not yet implemented these actions. We will continue to monitor the status of this recommendation.

Recommendation: The Assistant Secretary of State for Consular Affairs should develop minimum standards for E-2 company registration programs, such as standards for how often companies are to be re-vetted. (Recommendation 2)

Agency: Department of State
Status: Open

Comments: Department of State officials stated in January 2020 that the department plans to address this recommendation by incorporating into policy a 5-year mandatory review of companies registered at any post using a company registration program. As of July 2020, Department of State officials said that they had not yet implemented these actions. We will continue to monitor the status of this recommendation.

Recommendation: The Assistant Secretary of State for Consular Affairs should develop and implement a process to ensure that posts maintain required E-2 visa application documentation. (Recommendation 3)

Agency: Department of State
Status: Open

Comments: Department of State officials stated in January 2020 that the department plans to communicate a reminder to posts abroad that there is a requirement to scan required E-2 documentation into each visa applicant's record. Department of State also plans to provide regular policy guidance to consular managers at posts that adjudicate E-2 visa applications. Further, Department of State officials stated in July 2020 that the department plans to incorporate the supplemental E-2 visa application (DS-156E) into the standard online application for all nonimmigrant visa applicants (DS-160). However, the officials stated that they experienced technical challenges in doing so, and was still working to resolve the challenges as of July 2020. We will continue to monitor the status of this recommendation as the Department of State works to address the technical challenges.

Recommendation: The EPA Administrator should direct EPA officials responsible for appointing advisory committee members to follow a key step in its appointment process—developing and including draft membership grids in appointment packets with staff rationales for proposed membership—for all committees. (Recommendation 1)

Agency: Environmental Protection Agency
Status: Open

Comments: In September 2019, EPA restated its reasons for disagreeing with this recommendation. (EPA's rationale for disagreeing was originally stated in a June 2019 letter included in an appendix in our report.) We will provide updated information regarding this recommendation when it becomes available.

Recommendation: EPA's Designated Agency Ethics Official should direct EPA's Ethics Office, as part of its periodic review of EPA's ethics program, to evaluate—for example, through audits or spot-checks—the quality of financial disclosure reviews for special government employees appointed to EPA advisory committees. (Recommendation 2)

Agency: Environmental Protection Agency
Status: Open

Comments: In August 2019, EPA notified GAO that it expects to launch an electronic financial disclosure reporting system for special government employees in January 2021. Once financial disclosure forms for these individuals are available electronically, EPA's Ethics Office will be better positioned to audit or review the forms, according to EPA officials. In addition, the electronic filing system should minimize errors (e.g. failing to record the date that the form was received) made by filers and reviewers, according to EPA officials.

Recommendation: The Veterans Health Administration should disseminate guidance for VISNs and VAMCs that more clearly reflects its expectation that mental health providers in specialty care should record mental health treatment plans within veterans' medical records in an easily identifiable way. (Recommendation 1)

Agency: Department of Veterans Affairs: Veterans Health Administration
Status: Open

Comments: VHA concurred with this recommendation and provided an update on its progress in implementing it. In December 2019, VHA reported that it had developed a new memorandum regarding mental health treatment planning that explicitly states the requirement for mental health providers in specialty care to record mental health treatment plans as a separate, easily identifiable document in the medical record. According to this memorandum, these treatment plans are expected to ensure that it is clear what treatment is being provided, that different treatments were considered, and that ongoing assessments are used to determined whether treatment changes are needed for the patient. VHA also reported that the memorandum states that facilities must either use the current treatment planning software or another method to create such a plan. Finally, VHA noted that the memorandum requires VAMCs to attest to full implementation of these requirements. According to VHA, the memorandum was distributed in May 2019 and the implementation process is currently underway across VAMCs. As of March 2020, this recommendation remains open pending further updates from VHA.

Recommendation: The Veterans Health Administration should develop and implement an approach for monitoring treatment plans for veterans with mental health conditions to ensure that such plans include documentation that different evidence-based treatment options were considered. (Recommendation 2)

Agency: Department of Veterans Affairs: Veterans Health Administration
Status: Open
Priority recommendation

Comments: VHA concurred with this recommendation and provided an update on its progress in implementing it. In December 2019, VHA reported that it had developed a new memorandum regarding mental health treatment planning that explicitly states the requirement for mental health providers in specialty care to record mental health treatment plans that include (among other things) an indication that different treatments were considered. VHA stated that the memorandum requires VAMCs to implement ongoing chart reviews to ensure providers were meeting treatment planning expectations. Specifically, VHA stated that the memorandum requires all VAMCs to ensure that each licensed independent provider had 5 treatment plans reviewed biannually to determine whether treatment planning expectations were achieved, including whether different evidence-based treatments were considered. Finally, VHA noted that the memorandum requires VAMCs to attest to full implementation of this process. According to VHA, the memorandum was distributed in May 2019 and the implementation of this process is currently underway across VAMCs. As of March 2020, this recommendation remains open pending further updates from VHA.

Recommendation: The Secretary of Labor should document internal policies and procedures for managing the IRA prohibited transaction exemption process. (Recommendation 1)

Agency: Department of Labor
Status: Open

Comments: DOL agreed with this recommendation and plans to create an internal procedure manual which will document the Office of Exemption Determinations' process for managing IRA prohibited transaction exemption applications. When we confirm what actions DOL has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Labor, in consultation with the Commissioner of Internal Revenue, should establish a formal means, such as a memorandum of understanding or other mechanism, to support and guide DOL's and IRS's collaborative efforts to oversee IRA prohibited transaction exemptions. (Recommendation 2)

Agency: Department of Labor
Status: Open

Comments: DOL agreed with this recommendation and plans to periodically discuss all IRA exemption cases with IRS and did not elaborate on the formal means for this information sharing. IRS said that it has met with DOL to formalize collaboration on exemptions from prohibited transaction treatment in IRAs. DOL agreed to contact IRS within 25 days of DOL receiving an IRA prohibited transaction exemption application to determine if there are any Internal Revenue Code issues. To avoid any disclosure concerns, DOL will not identify the applicant at that time. This new process will be reflected in DOL's forthcoming internal procedure manual for the prohibited transaction exemption process.

Recommendation: The Commissioner of Internal Revenue, in consultation with the Secretary of Labor, should establish a formal means, such as a memorandum of understanding or other mechanism, to support and guide DOL's and IRS's collaborative efforts to oversee IRA prohibited transaction exemptions. (Recommendation 3)

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with this recommendation and said it has met with DOL to formalize collaboration on exemptions from prohibited transaction treatment in IRAs. DOL agreed to contact IRS within 25 days of DOL receiving an IRA prohibited transaction exemption application to determine if there are any Internal Revenue Code issues. To avoid any disclosure concerns, DOL will not identify the applicant at that time. This new process will be reflected in DOL's forthcoming internal procedure manual for the prohibited transaction exemption process.

Recommendation: The Commissioner of Fiscal Service should develop and implement a mechanism to reasonably assure that all the journal entries recorded in the Schedules of the General Fund general ledgers can be readily identified and traced, such as through a unique identifier, to determine the effect of a transaction on all applicable general ledger accounts and line items of the Schedules of the General Fund, including the budget deficit. (Recommendation 1)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should develop and implement a mechanism to reasonably assure that payment transactions recorded in the Schedules of the General Fund general ledgers capture all of the key information needed, including payment schedules if applicable, to readily trace transactions to the information certified by the federal agency. (Recommendation 2)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should develop and implement additional reporting requirements with related guidance for federal agencies that better align with the General Fund financial reporting objectives and enable Fiscal Service to capture the effect of a transaction on all applicable general ledger accounts and line items of the Schedules of the General Fund, including the budget deficit. (Recommendation 3)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: We recommend that the Commissioner of Fiscal Service develop and implement a process that would enable Fiscal Service to obtain the information necessary to effectively assess the effect of the Statement of Difference on the Schedules of the General Fund for those federal agencies that have not implemented the Central Accounting and Reporting System. (Recommendation 4)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: We recommend that the Commissioner of Fiscal Service design and implement procedures to evaluate risks and monitor internal controls over financial reporting relevant to the Schedules of the General Fund. (Recommendation 5)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should develop and implement a mechanism for evaluating agencies' use of BETCs based on the enhanced guidance. (Recommendation 7)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should design and implement procedures to (1) obtain and review supporting documentation for reported activity included on Agency Submission Forms and (2) assess the overall completeness of federal agency activity reported on Agency Submission Forms. (Recommendation 8)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should design and implement procedures to periodically review all active Treasury accounts to determine whether they are valid and the related General Fund account balances are consistent with federal agency records. (Recommendation 10)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Commissioner of Fiscal Service should enhance current procedures for reviewing negative balances to include Treasury accounts with indefinite periods of availability. (Recommendation 11)

Agency: Department of the Treasury: Bureau of the Fiscal Service
Status: Open
Priority recommendation

Comments: Fiscal Service concurred with the results of our audit. As of July 2020, Fiscal Service developed a remediation plan and efforts are underway to address this recommendation. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Administrator of CMS should institute a process to routinely assess, and take steps to ensure, as appropriate, that Medicare and Medicaid documentation requirements are necessary and effective at demonstrating compliance with coverage policies while appropriately addressing program risks. (Recommendation 1)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open
Priority recommendation

Comments: The Department of Health and Human Services concurred with this recommendation. In February 2020, the Centers for Medicare & Medicaid Services (CMS) noted that it had clarified and amended several Medicare documentation requirements as part of an agency initiative to assess such requirements. CMS further stated that Medicaid documentation requirements are generally established at the state level, and that the agency has taken steps to identify best practices for documentation requirements and share them with states. However, we believe that CMS still needs to take steps to assess documentation requirements in both programs to better understand how the variation in the programs' requirements affects estimated improper payment rates. Without an assessment of how the programs' documentation requirements affect estimates of improper payments, CMS may not have the information it needs to ensure that Medicare and Medicaid documentation requirements are effective at demonstrating compliance and appropriately address program risks.

Recommendation: The Administrator of CMS should take steps to ensure that Medicaid medical reviews provide robust information about and result in corrective actions that effectively address the underlying causes of improper payments. Such steps could include adjusting the sampling approach to reflect state-specific program risks, and working with state Medicaid agencies to leverage other sources of information, such as state auditor and the Department of Health and Human Services' Office of the Inspector General findings. (Recommendation 2)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: The Department of Health and Human Services (HHS) did not concur with this recommendation. As of September 2020, HHS has stated that it does not plan to implement this recommendation because the agency believes the resource requirement is not justified based on the potential improper payment findings. HHS further stated that the agency already uses a variety of sources to identify and take corrective actions to address underlying causes of improper Medicaid payments. However, we found that the Centers for Medicare & Medicaid Services (CMS) and state Medicaid agencies are expending time and resources developing and implementing corrective actions that may not be representative of the underlying causes of improper payments in their states. Without robust information to effectively identify the underlying causes of improper payments, CMS and state Medicaid agencies may not develop corrective actions that effectively address Medicaid program risks.

Recommendation: The Administrator of CMS should take steps to minimize the potential for Payment Error Rate Measurement (PERM) medical reviews to compromise fraud investigations, such as by directing states to determine whether providers selected for PERM medical reviews are also under fraud investigation and to assess whether such reviews could compromise investigations. (Recommendation 3)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: The Department of Health and Human Services (HHS) concurred with this recommendation. In October 2019, the Centers for Medicare & Medicaid Services (CMS) updated Medicaid Payment Error Rate Measurement (PERM) program guidance to strongly encourage state Medicaid agencies to proactively review providers selected for the state's PERM review; determine whether any of the selected providers are subjects of current or impending fraud investigations; and assess whether a PERM review could compromise the fraud investigation. CMS included this clarification in updated contractor guidance and in information provided to state Medicaid agencies. CMS plans to include the updated guidance in the fiscal year 2019 PERM program manual, which CMS anticipates completing by the end of 2019. Such revisions to the PERM manual will further codify and encourage state efforts to prevent PERM reviews from potentially compromising ongoing fraud investigations. As of September 2020, CMS has not informed us of any additional actions taken to implement this recommendation, including of any revisions to the PERM manual; we will update the status of this recommendation when we receive additional information.

Recommendation: The Administrator of CMS should address disincentives for state Medicaid agencies to notify the PERM contractor of providers under fraud investigation. This could include educating state officials about the benefits of reporting providers under fraud investigation, and taking actions such as revising how claims from providers under fraud investigation are accounted for in state-specific FFS improper payment rates, or the need for corrective actions in such cases. (Recommendation 4)

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: The Department of Health and Human Services (HHS) concurred with this recommendation. In October 2019, the Centers for Medicare & Medicaid Services (CMS) noted that the agency updated Medicaid Payment Error Rate Measurement (PERM) guidance regarding state Medicaid agencies' corrective action plans for providers under fraud investigation. If a state Medicaid agency opts to remove a provider from the state's PERM review due to a fraud investigation, claims associated with the provider are determined to be improper, due to no documentation. Under the updated guidance, states are no longer required to develop a corrective action plan for such claims, since the state is already addressing the issue through a fraud investigation. CMS included this updated guidance in the fiscal year 2017 PERM corrective action plan template, and plans to include the updated guidance in the fiscal year 2019 PERM program manual, which CMS anticipates completing by the end of 2019. Such revisions to the PERM manual will remove a disincentive for state Medicaid agencies to notify the PERM contractor of providers under fraud investigation. As of September 2020, CMS has not informed us of any additional actions taken to implement this recommendation, including of any revisions to the PERM manual; we will update the status of this recommendation when we receive additional information.

Recommendation: Congress should consider taking legislative action to resolve the long-standing issues between the Corps and the Advisory Council on Historic Preservation over the Corps Regulatory Program's procedures for implementing section 106 of the National Historic Preservation Act. (Matter for Consideration 1)

Agency: Congress
Status: Open

Comments: When we determine what steps the Congress has taken, we will provide updated information

Recommendation: The Secretary of Energy should develop a documented policy or clarify existing policy to implement the statutory requirement to consult with Alaska Native Corporations (ANC) on the same basis as Indian tribes under Executive Order 13175. (Recommendation 1)

Agency: Department of Energy
Status: Open

Comments: As of April 2020, the Department of Energy plans to clarify and consolidate its consultation policies and practices for consultation with Alaska Native Corporations by June 2021.

Recommendation: The Administrator of the Environmental Protection Agency should develop a documented policy or clarify existing policy to implement the statutory requirement to consult with ANCs on the same basis as Indian tribes under Executive Order 13175. (Recommendation 2)

Agency: Environmental Protection Agency
Status: Open

Comments: In December 2019, EPA created a draft document, Guiding Principles for Consulting with Alaska Native Claims Settlement Act Corporations, and issued it for consultation with Alaska Native Corporations (ANCs). The draft guiding principles seek to clarify EPA's consultation and coordination practices with ANCs. Additionally, according to agency officials, an EPA working group is in the process of developing an internal, best practices implementation guide. As of April 2020, EPA expects to finalize these guidance documents in 2020

Recommendation: The Secretary of Housing and Urban Development should develop a documented policy or clarify existing policy to implement the statutory requirement to consult with ANCs on the same basis as Indian tribes under Executive Order 13175. (Recommendation 3)

Agency: Department of Housing and Urban Development
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Homeland Security should establish a time frame for developing or updating policy to implement the statutory requirement to consult with ANCs on the same basis as Indian tribes under Executive Order 13175. (Recommendation 5)

Agency: Department of Homeland Security
Status: Open

Comments: In February 2019, the Department of Homeland Security provided GAO documentation supporting a planned time frame of March 2020 for developing and updating its consultation policy to implement the statutory requirement to consult with ANCs in response to this recommendation. We plan to close the recommendation after reviewing documentation that the policy has been updated.

Recommendation: The Assistant to the Secretary of Agriculture for Rural Development should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on proposed infrastructure projects. (Recommendation 6)

Agency: Department of Agriculture: Rural Development
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of Civil Works of the Corps should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 7)

Agency: Department of Defense: Department of the Army: Corps of Engineers: Civil Works
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director for the Bureau of Ocean Energy Management should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 8)

Agency: Department of the Interior: Bureau of Ocean Energy Management
Status: Open

Comments: As of September 2019, Bureau of Ocean Energy Management (BOEM) plans to amend its tribal consultation policy with policies and procedures for communicating with tribes after consultation by December 2020.

Recommendation: The Secretary of Energy should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 10)

Agency: Department of Energy
Status: Open

Comments: As of April 2020, the Department of Energy indicated that it plans to document policies for communicating about how input from tribal consultation was considered in agency decisions on infrastructure projects by June 2021.

Recommendation: The Administrator of the Federal Highway Administration should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 14)

Agency: Department of Transportation: Federal Highway Administration
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Homeland Security should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 16)

Agency: Department of Homeland Security
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Housing and Urban Development should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 17)

Agency: Department of Housing and Urban Development
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Chairman of the Nuclear Regulatory Commission should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 19)

Agency: Nuclear Regulatory Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Transportation should document in the agency's tribal consultation policy how agency officials are to communicate with tribes about how tribal input from consultation was considered in agency decisions on infrastructure projects. (Recommendation 20)

Agency: Department of Transportation
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The DOD Inspector General should coordinate with the IGs of the military services to take additional actions to improve performance against unmet timeliness goals. This includes steps to improve performance of senior official misconduct investigations and military service reprisal intakes, and to resolve disagreement on notifications. (Recommendation 1)

Agency: Department of Defense
Status: Open

Comments: The DOD Inspector General concurred with this recommendation, and in December 2019 reported to the Chairs of the Senate and House Armed Services Committees that the DOD and military service Inspectors General had convened a working group to coordinate performance improvement on unmet timeliness goals. According to the IG, the working group's recommendations are being incorporated into uniform standards for reprisal investigations that are expected to be finalized in the second quarter of fiscal year 2020. We will update the status of this recommendation once we confirm what actions the department has taken.

Recommendation: The Air Force Inspector General should establish procedures to fully reflect and implement DOD policy on the protection of whistleblower confidentiality. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: The Air Force Inspector General concurred with this recommendation, and the DOD Officer of Inspector General stated in December 2019 that the Air Force Inspector General was in the process of implementing it. We will update the status of this recommendation once we confirm what actions the department has taken.

Recommendation: The Marine Corps Inspector General should establish procedures to fully reflect and implement DOD policy on the protection of whistleblower confidentiality. (Recommendation 4)

Agency: Department of Defense
Status: Open

Comments: The Marine Corps Inspector General concurred with this recommendation, and the DOD Office of Inspector General stated in December 2019 that the Marine Corps Inspector General was in the process of implementing it. We will update the status of this recommendation once we confirm what actions the department has taken.

Recommendation: The Naval Inspector General should establish procedures to fully reflect and implement DOD policy on the protection of whistleblower confidentiality. (Recommendation 5)

Agency: Department of Defense
Status: Open

Comments: The Naval Inspector General concurred with this recommendation, and the DOD Office of Inspector General stated in December 2019 that the Naval Inspector General was in the process of implementing it. We will update the status of this recommendation once we confirm what actions the department has taken.

Recommendation: The DOD Inspector General should consider interim actions as the whistleblower enterprise case management system is being developed to help ensure that access to sensitive whistleblower information in the current case management system and associated document repository is limited to information that is necessary to accomplish assigned tasks. (Recommendation 6)

Agency: Department of Defense
Status: Open

Comments: The DOD Inspector General concurred with this recommendation, and stated in December 2019 that the DOD Office of Inspector General was in the process of implementing it. We will update the status of this recommendation once we confirm what actions the department has taken.

Recommendation: The DOD Inspector General should coordinate with the IGs of the military services to develop a plan to fully restrict case access in the future whistleblower enterprise case management system so that user access is limited to information necessary to accomplish assigned tasks in accordance with organizational missions and business functions. (Recommendation 7)

Agency: Department of Defense
Status: Open

Comments: The DOD Inspector General concurred with this recommendation, and in December 2019 reported to the Chairs of the Senate and House Armed Services Committees that the future whistleblower case management system would incorporate design limits providing for access to information only by personnel necessary to accomplish assigned tasks in accordance with organizational missions and business functions. According to the IG, the system is scheduled to deploy in the third quarter of fiscal year 2020. We will update the status of this recommendation once we confirm what actions the department has taken.

Recommendation: The DOD Inspector General should enhance its process for periodically reviewing whistleblower case management system and document repository user privileges by including steps to ensure that such privileges remain valid after system updates, as appropriate. (Recommendation 8)

Agency: Department of Defense
Status: Open

Comments: The DOD Inspector General concurred with this recommendation, and stated in December 2019 that the DOD Office of Inspector General was in the process of implementing it. We will update the status of this recommendation once we confirm what actions the department has taken.

Recommendation: The Air Force Inspector General should consider interim actions as the whistleblower enterprise case management system is being developed to help ensure that access for users of existing applications is limited to information that is necessary to accomplish assigned tasks in accordance with organizational missions and business functions. (Recommendation 9)

Agency: Department of Defense
Status: Open

Comments: The Air Force Inspector General concurred with this recommendation, and stated in December 2019 that an update scheduled for the end of April 2020 would enhance access control measures in its existing applications. We will update the status of this recommendation once we confirm what actions the department has taken.

Recommendation: The Army Inspector General should consider interim actions as the whistleblower enterprise case management system is being developed to help ensure that access for users of existing applications is limited to information that is necessary to accomplish assigned tasks in accordance with organizational missions and business functions. (Recommendation 10)

Agency: Department of Defense
Status: Open

Comments: The Army Inspector General concurred with this recommendation, and the DOD Office of Inspector General stated in December 2019 that the Army Inspector General was in the process of implementing it. We will update the status of this recommendation once we confirm what actions the department has taken.

Recommendation: The Marine Corps Inspector General should develop a plan to ensure that its redesigned whistleblower case management application restricts user access to information based on what is needed to accomplish assigned tasks in accordance with organizational missions and business functions. (Recommendation 11)

Agency: Department of Defense
Status: Open

Comments: The Marine Corps Inspector General concurred with this recommendation, and the DOD Office of Inspector General stated in December 2019 that the Marine Corps Inspector General was in the process of implementing it. We will update the status of this recommendation once we confirm what actions the department has taken.

Recommendation: The Naval Inspector General should consider interim actions as the whistleblower enterprise case management system is being developed to help ensure that access for users of existing applications is limited to information that is necessary to accomplish assigned tasks in accordance with organizational missions and business functions. (Recommendation 12)

Agency: Department of Defense
Status: Open

Comments: The Naval Inspector General concurred with this recommendation, and the DOD Office of Inspector General stated in December 2019 that the Naval Inspector General was in the process of implementing it. We will update the status of this recommendation once we confirm what actions the department has taken.

Recommendation: The Program Director for Financial Integration should collect and document requirements to define project scope and meet project objectives. These requirements should be updated periodically throughout the life of the project. (Recommendation 2)

Agency: Department of Energy: National Nuclear Security Administration
Status: Open

Comments: As of August 2020, NNSA provided a project plan for tasks to be completed for common financial reporting through 2021. However, NNSA has not developed requirements that define specific or detailed requirements for successful implementation of common financial reporting, such as the types of information that program managers need.

Recommendation: The Program Director for Financial Integration should develop a detailed project schedule. The detailed schedule should be documented as part of the annual report to Congress required in the National Defense Authorization Act for Fiscal Year 2017. (Recommendation 3)

Agency: Department of Energy: National Nuclear Security Administration
Status: Open

Comments: As of August 2020, NNSA established a detailed project schedule for the common financial reporting effort through fiscal year 2021. However, NNSA should communicate this detailed project schedule for the effort to Congress on an annual basis.

Recommendation: The Program Director for Financial Integration should develop a formal process to identify risks, document those risks, and plan how to minimize risk exposure. (Recommendation 6)

Agency: Department of Energy: National Nuclear Security Administration
Status: Open

Comments: In June 2020, NNSA developed a risk management plan for common financial reporting which established a framework for identifying and managing risks. GAO will continue to monitor NNSA's efforts to implement the plan, including how NNSA identifies and documents risks and mitigates risk exposure using its management plan.

Recommendation: The Program Director for Financial Integration should develop an approach to effectively engage with all project stakeholders that incorporates their expectations into project decisions. (Recommendation 7)

Agency: Department of Energy: National Nuclear Security Administration
Status: Open

Comments: As of September 2020, NNSA has continued to engage on a regular basis with its M&O contractors. However, similar efforts have not continued with stakeholders of the program offices.

Recommendation: The Secretary of Health and Human Services should revise HHS's process for conducting improper payment risk assessments for Head Start to help ensure that it results in a reliable assessment of whether the program is susceptible to significant improper payments. This should include preparing sufficient documentation to support its risk assessments. (Recommendation 1)

Agency: Department of Health and Human Services
Status: Open
Priority recommendation

Comments: The Department of Health and Human Services (HHS) concurred with this recommendation. In fiscal year 2019, HHS reported that it utilized Microsoft SharePoint to facilitate and begin to automate the Improper Payment Risk Assessment process. According to HHS, the SharePoint risk assessment form included the added ability to track the status of submissions and collect any applicable supporting documentation. Also, HHS stated that the Assistant Secretary for Financial Resources staff discussed the importance of maintaining supporting documentation during the fiscal year 2019 Improper Payment Risk Assessment Kick-Off meeting with HHS's operating divisions, and also built this feature into the SharePoint form. In fiscal year 2020, HHS reported that the implementation of the long-term solution to conducting improper payment risk assessments, the Risk Assessment Portal (previously called the Automated Improper Payment Framework), is underway and went into production in March 2020. Additionally, HHS indicated that it has revised its improper payment questionnaire and scoring process to ensure HHS performs a reliable assessment of susceptibility to significant improper payments. Also, HHS stated that it will leverage the Risk Assessment Portal, new questionnaire, and revised scoring process in the fiscal year 2020 risk assessment reporting period. Further, HHS stated that it is reviewing GAO reports and resources, capturing best practices from other agencies, and soliciting feedback from HHS's operating divisions to further improve its processes. Last, HHS stated that it will continue to develop policies, procedures, and supporting tools throughout calendar year 2020. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Secretary of Health and Human Services should revise HHS's procedures for conducting improper payment risk assessments to help ensure that all programs and activities are assessed for susceptibility to significant improper payments at least once every 3 years, as required by IPIA. (Recommendation 2)

Agency: Department of Health and Human Services
Status: Open
Priority recommendation

Comments: The Department of Health and Human Services (HHS) concurred with this recommendation. In fiscal year 2019, HHS reported that it utilized DATA Act information to create an inventory of programs and activities that could potentially be subject to improper payment risk assessment requirements. According to HHS, it developed a risk-based methodology for selecting programs and activities for review using the DATA Act files. Data fields within the DATA Act files allow HHS to further analyze the program and activity inventory. For example, the object class data enabled HHS to categorize the program's spending to provide insight into each program's unique risks. HHS stated that this methodology was used and documented in fiscal year 2019 but HHS plans to further refine and finalize this approach. In fiscal year 2020, HHS reported that its Office of the Inspector General (OIG) is currently reviewing the methodology as part of the Annual Inspector General review of HHS's improper payment reporting under the Improper Payments Elimination and Recovery Act of 2020. HHS stated that it will implement any feedback from the OIG, as well as lessons learned from the fiscal year 2019 and fiscal year 2020 risk assessment reporting period, in fiscal year 2021. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: The Attorney General should revise DOJ's process for conducting improper payment risk assessments for Law Enforcement to help ensure that it results in a reliable assessment of whether the program is susceptible to significant improper payments. This should include preparing sufficient documentation to support DOJ's risk assessments. (Recommendation 4)

Agency: Department of Justice
Status: Open
Priority recommendation

Comments: The Department of Justice (DOJ) did not concur with this recommendation. In January 2020, DOJ reiterated that it continues to not concur with the recommendation. DOJ stated that its risk assessment methodology provides DOJ management with a reasonable basis for determining whether the law enforcement program, as well as DOJ's other four mission-aligned programs, are susceptible to significant improper payments. In addition, DOJ reiterated that it continues to not concur with GAO's conclusion that DOJ's risk assessment documentation is not adequate. DOJ stated that its documentation meets all of the requirements in the Improper Payments Information Act of 2002 (IPIA), as amended, and the Office of Management and Budget's (OMB) implementing guidance. Therefore, DOJ stated that it does not believe it would be a prudent use of limited resources to expand on the documentation that already exists. DOJ stated that notwithstanding its differences from GAO on the recommendation, it will continue to examine its risk assessment methodology. Finally, DOJ stated that its goal has been, and continues to be, meeting the requirements of IPIA, as amended, and OMB's implementing guidance in a cost effective manner. We continue to believe this recommendation is appropriate because DOJ's risk assessment documentation did not adequately demonstrate how DOJ determined the weighting of the risk factors or the numerical risk level ranges or whether a program is or is not susceptible to significant improper payments. We will continue to monitor the agency's actions to address the recommendation.

Recommendation: The Secretary of Agriculture should amend its analysis of selected data centers to address key elements of a cost-benefit and cost-effectiveness analysis as defined by OMB Circular A-94 and relevant agency guidance. (Recommendation 1)

Agency: Department of Agriculture
Status: Open

Comments: In March 2020, the Department of Agriculture asserted that it has implemented the recommendation but has not provided sufficient evidence to support its assertion.

Recommendation: When amending its analysis of the selected data centers, the Secretary of Agriculture should report on the assessment of each facility's protective measures, as outlined by the Interagency Security Committee guidance. (Recommendation 2)

Agency: Department of Agriculture
Status: Open

Comments: In March 2020, the Department of Agriculture asserted that it has implemented the recommendation but has not provided sufficient evidence to support its assertion.

Recommendation: When amending its analysis of the selected data centers, the Secretary of Agriculture should report on an analysis of the information security controls for each data center, in order to evaluate the data center's information security capabilities. (Recommendation 3)

Agency: Department of Agriculture
Status: Open

Comments: In March 2020, the Department of Agriculture asserted that it has implemented the recommendation but has not provided sufficient evidence to support its assertion.

Recommendation: When amending its analysis of the selected data centers, the Secretary of Agriculture should report on each data center's demonstrated history of restoring continuity of operation functions in the event of a service disruption. (Recommendation 4)

Agency: Department of Agriculture
Status: Open

Comments: In March 2020, the Department of Agriculture asserted that it has implemented the recommendation but has not provided sufficient evidence to support its assertion.

Recommendation: The Administrator of USAID should establish additional controls to improve the consistency and completeness of performance information that USAID uses to monitor counter-trafficking in persons projects. (Recommendation 5)

Agency: United States Agency for International Development
Status: Open
Priority recommendation

Comments: USAID concurred with GAO's recommendation and has begun to take corrective action in response. In a March 11, 2019 letter to congressional committees, USAID noted its commitment to address GAO's recommendation through implementing additional controls for the agency's counter-trafficking in persons projects. Specifically, USAID commented that it was implementing data systems and taking additional steps intended to strengthen data management, improve record-keeping, increase data quality, and build capacity of local partners, with a target completion date of April 2020. As of January 2020, USAID officials noted that the agency has piloted its information management system, the Development Information Solution (DIS), in 7 USAID missions and is considering a strategy to deploy the DIS agency-wide by the end of 2021. According to USAID officials and documents, work has been completed to build DIS features that will help to improve the consistency and completeness of performance information, such as the ability to create and centrally manage customized indicators within DIS as well as centrally track and manage project activities, targets, and results. USAID has also updated its performance monitoring policy to require the completion of Performance Management Plans, within 3 months of completion of the mission's Country Development Cooperation Strategy, instead of the previously required 6 months. In addition, according to USAID officials and documents GAO reviewed, USAID and the Department of State's (State) Office of U.S. Foreign Assistance Resources have developed additional administrative reports and processes that encourage increased ownership and review of data in the FACTSinfo NextGen system, the system of record for performance information related to the expenditure of foreign assistance funds. According to USAID officials and documents GAO reviewed, in order to improve quality control for this data, USAID and State will conduct a high level administrative review of the performance reporting process, including of the participation of key stakeholders in this process, beginning in March 2020. Once USAID provides additional information to GAO, including information on steps to more fully deploy the DIS and implement changes resulting from its review of the PPR process under its new grants management data system, GAO will determine whether USAID has established additional controls to improve the consistency and completeness of performance information.

Recommendation: The Secretary of Defense should ensure that the Director of the Corrosion Office, in coordination with the military departments, issues guidance to require a standard process for identifying and documenting the rationale for the annual funding levels needed to perform the duties of each Corrosion Executive. The guidance should, at a minimum, identify and define the cost elements and the methods that may be used to estimate the funding levels and describe the supporting documentation that should be maintained. (Recommendation 1)

Agency: Department of Defense
Status: Open

Comments: DOD concurred with this recommendation. The Corrosion Office plans to develop a standardized process for identifying annual funding levels to perform the duties of each Corrosion Executive. It plans to include this process in a new DOD manual on corrosion that it has a goal of creating by the end of calendar year 2020. We will monitor the extent to which DOD implements this recommendation.

Recommendation: The Secretary of Defense should ensure that the Director of the Corrosion Office documents, within existing or new guidance, its process for reviewing the Military Departments' Corrosion Executive Reports prior to submitting the Corrosion Office Annual Report to Congress, including a process to consistently maintain documentation of its reviews. (Recommendation 2)

Agency: Department of Defense
Status: Open

Comments: DOD concurred with this recommendation. The Corrosion Office plans to develop and implement a standardized operating procedure for processing and documenting its review of the Corrosion Executive Reports. It plans to complete and implement this standardized operating procedure by November 1, 2019 . We will monitor the extent to which DOD implements this recommendation.

Recommendation: The Secretary of Defense should ensure that the Director of the Corrosion Office develops a process to consistently maintain documentation of its reviews and evaluations of corrosion planning for major weapon system programs. These records, at a minimum, should show what comments were made by the Corrosion Office in its reviews and evaluations, and track the actions taken to resolve those comments. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: DOD concurred with this recommendation. The Corrosion Office plans to develop and maintain a process for documenting the Office's reviews, evaluations, and comments, and to track the weapon system programs' actions on corrosion planning. It plans to include this process in a new DOD manual on corrosion that will include information on considering corrosion during the weapon system program-planning evaluation process, and to develop an internal data system for tracking purposes. Its goal is to create this new manual and internal data system is by the end of calendar year 2020. We will monitor the extent to which DOD implements this recommendation.

Recommendation: The Secretary of the Army should ensure that its Corrosion Executive issues clear guidance establishing a process for reviewing, evaluating, and documenting the adequacy of corrosion planning and oversight efforts for major weapon systems throughout the systems' life cycle, including during the early phases of the acquisition life cycle, and maintain documentation of the oversight actions. (Recommendation 4)

Agency: Department of Defense
Status: Open

Comments: DOD concurred with this recommendation. When we confirm what actions the Army has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Air Force should ensure that its Corrosion Executive issues clear guidance establishing a process for reviewing, evaluating, and documenting the adequacy of corrosion planning and oversight efforts for major weapon systems throughout the systems' life cycle, including during the early phases of the acquisition life cycle, and maintain documentation of oversight actions. (Recommendation 5)

Agency: Department of Defense
Status: Open

Comments: DOD concurred with this recommendation. When we confirm what actions the Army has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Army should direct the Army's Provost Marshal General to take actions to help ensure that physical security inspections at locations with Arms, Ammunition, and Explosives (AA&E) are conducted on time, as required by Army guidance. (Recommendation 1)

Agency: Department of Defense: Department of the Army
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Navy should direct the Chief of Naval Operations' Supply, Ordnance, and Logistics Operations Division to take actions to help ensure that physical security inspections at locations with AA&E are conducted on time, as required by Navy guidance. (Recommendation 2)

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Navy should direct the Marine Corps Deputy Commandant for Plans, Policies, and Operations to take actions to help ensure that physical security inspections at locations with AA&E are conducted on time, as required by Marine Corps guidance. (Recommendation 3)

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of the Air Force should direct the Air Force's Office of the Deputy Chief of Staff for Logistics, Engineering and Force Protection, Directorate of Security Forces, to take actions to help ensure that inspectors at locations with AA&E are consistently documenting in inspection reports that all minimum requirements for physical security were checked. (Recommendation 4)

Agency: Department of Defense: Department of the Air Force
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Defense should direct the Under Secretary of Defense for Intelligence to revise DOD guidance to require that the military services establish a process to consistently document the resolution of all identified physical security deficiencies. (Recommendation 5)

Agency: Department of Defense
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: OAPM should monitor how field offices currently manage older, existing Management and Operating contract documents and use the results to improve its process for accessing such documents. (Recommendation 2)

Agency: Department of Energy: National Nuclear Security Administration
Status: Open

Comments: NNSA agreed with this recommendation. Per NNSA, as of October 2018, it was developing a plan and schedule for implementing Procurement Management Reviews (PMRs), which will include monitoring how NNSA field offices manage older management and operating contract documents and use the results to improve access to such documents. As of April 2020, we will continue to monitor how NNSA carries out its oversight of field offices contract document management practices.

Recommendation: The Commissioner of CBP should revise policy or guidance to ensure documentation of required control activities in its case management system, such as legal review of adverse actions, and data verification (Recommendation 1).

Agency: Department of Homeland Security: United States Customs and Border Protection
Status: Open

Comments: In February 2020, CBP provided documentation of a data verification checklist used by its Office of Professional Responsibility for the Joint Integrity Case Management System. However, CBP also needs to develop a similar tool or method to verify case management data contained in its Human Resource Business Engine system. And to fully implement this recommendation, CBP needs to revise policy or guidance to ensure documentation of control activities (data verification and legal review of adverse actions) in its case management systems. We are continuing to follow-up on the actions taken by CBP to implement this recommendation.

Recommendation: The Commissioner of CBP should monitor the duration of all cases beginning-to-end by stage and by case type (Recommendation 4).

Agency: Department of Homeland Security: United States Customs and Border Protection
Status: Open

Comments: In October 2018, CBP told us that it is currently updating one of its case management systems to better monitor cases beginning-to-end by stage and by case type. Once implemented, CBP's Office of Professional Responsibility will develop an internal management report that includes information on caseload and associated timelines. The estimated completion date for this recommendation is September 30, 2019. As of September 2020, we are continuing to follow up with CBP on its actions to implement this recommendation.

Recommendation: The Commissioner of CBP should monitor the timeliness of misconduct cases according to established targets for management inquiries, administrative inquiries, and criminal and non-criminal investigations using case management system data (Recommendation 5).

Agency: Department of Homeland Security: United States Customs and Border Protection
Status: Open

Comments: In October 2018, CBP stated that it is currently updating one of its case management systems to better monitor the timeliness of misconduct cases according to established targets. Once updated, CBP's Office of Professional Responsibility will develop an internal management report that includes information on caseload and associated timelines. The estimated completion date for this recommendation is September 30, 2019. As of September 2020, we are continuing to follow up with CBP on its actions to implement this recommendation.

Recommendation: The Commissioner of CBP should define and document the case management system data fields to be used for monitoring all established performance targets and provide related guidance to staff (Recommendation 6).

Agency: Department of Homeland Security: United States Customs and Border Protection
Status: Open

Comments: In October 2018, CBP stated that its Office of Professional Responsibility will define the case management system data fields used to measure established performance targets, and it will provide the appropriate guidance to staff. The estimated completion date of this recommendation is September 30, 2019. As of September 2020, we are continuing to follow up with CBP on its actions to implement this recommendation.

Recommendation: The Director of ICE should require staff to document the investigative findings (case resolution codes) of management inquiries in the case management system (Recommendation 8).

Agency: Department of Homeland Security: United States Immigration and Customs Enforcement
Status: Open

Comments: In November 2018, ICE provided documentation of related communication provided to staff. However, this documentation did not include revised policy or guidance documents that requires staff to document the investigative findings in the employee misconduct case management system. As of September 2020, we are continuing to follow-up on ICE's actions to implement this recommendation.

Recommendation: The Director of ICE should modify ICE's annual self-inspection program to track the status of related corrective actions to ensure they are implemented in a timely manner (Recommendation 9).

Agency: Department of Homeland Security: United States Immigration and Customs Enforcement
Status: Open

Comments: In October 2018, ICE stated that it is revising its policy for its self-Inspection program to track the status of related corrective actions. ICE also stated that it will review three program offices for compliance with these revised policies and procedures during fiscal year 2019. The estimated completion date of this recommendation is June 28, 2019. As of September 2020, we are continuing to follow-up on ICE's actions to implement this recommendation.

Recommendation: The Director of ICE should monitor the duration of all cases beginning-to-end by stage and by case type (Recommendation 10).

Agency: Department of Homeland Security: United States Immigration and Customs Enforcement
Status: Open

Comments: In October 2018, ICE stated that beginning in fiscal year 2019, a project team will develop the capability to monitor the duration of all employee misconduct cases beginning-to-end by stage and by case type. The estimated completion date of this recommendation is June 28, 2019. As of September 2020, we are continuing to follow-up on ICE's actions to implement this recommendation.

Recommendation: The Director of ICE should monitor the timeliness of misconduct cases according to established targets for management inquiries and Employee Relations specialist review of proposal and decision of disciplinary outcomes using case management system data (Recommendation 11).

Agency: Department of Homeland Security: United States Immigration and Customs Enforcement
Status: Open

Comments: In October 2018, ICE stated that its Office of Professional Responsibility developed guidance regarding established targets for the completion of management inquiries and will distribute the guidance to applicable staff. ICE also stated that it is developing timeliness targets for Employee Relations specialist review of proposals and decisions of disciplinary outcomes and will also distribute this guidance to applicable staff. The estimated completion date for this recommendation is June 28, 2019. As of September 2020, we are continuing to follow-up on ICE's actions to implement this recommendation.

Recommendation: The Director of ICE should define and document the case management system data fields and methodology to be used for monitoring all established performance targets and provide related guidance to staff (Recommendation 12).

Agency: Department of Homeland Security: United States Immigration and Customs Enforcement
Status: Open

Comments: In October 2018, ICE stated that it will work to define and document the case management system data fields and methodology to be used for monitoring all established performance targets and will provide related guidance to applicable staff. The estimated completion date for this recommendation is June 28, 2019. As of September 2020, we are continuing to follow-up on ICE's actions to implement this recommendation.

Recommendation: The Administrator of TSA should monitor the duration of all cases beginning-to-end by stage and case type (Recommendation 16).

Agency: Department of Homeland Security: Transportation Security Administration
Status: Open

Comments: In September 2020, TSA provided documentation of internal reports that measure duration. However, the reports do not provide management information on the duration of all case types from beginning-to-end and, by stage. TSA needs to provide evidence that it monitors the duration of all cases, including a description of which process stages are measured and which data fields are used to measure the total duration from beginning-to-end and by stage. We are continuing to follow up on the actions taken by TSA to implement this recommendation.

Recommendation: The Administrator of TSA should monitor the timeliness of misconduct cases according to established targets for management inquiries (fact finding) and administrative inquiries, and the proposal and decision stages, using case information system data (Recommendation 17).

Agency: Department of Homeland Security: Transportation Security Administration
Status: Open

Comments: In September 2020, TSA provided evidence of reports it uses to measure duration. However, these reports do not show how TSA performs with regards to established targets. TSA needs to provide evidence of how it monitors the timeliness of all established targets , including which specific data fields are used to measure these targets. We are continuing to follow up on the actions taken by TSA to implement this recommendation.

Recommendation: The Administrator of TSA should define and document the case management system data fields and methodology to be used for monitoring all established performance targets and provide related guidance to staff (Recommendation 18).

Agency: Department of Homeland Security: Transportation Security Administration
Status: Open

Comments: In May 2019, TSA provided guidance to its staff related to monitoring performance targets. However, these documents do not specify which system data should be used as part of the methodology for monitoring all established performance targets. TSA needs to provide documentation of guidance to staff that defines and documents all the specific case management system data field names (in the various databases, as applicable) and methodology staff should use to monitor all established timeliness targets. We are continuing to follow up on the actions taken by TSA to implement this recommendation.

Recommendation: The Secretary of the Navy should: assess why reverse auctions that are conducted using existing contract vehicles have only one bidder at higher rates than reverse auctions conducted on the open market; determine what factors indicate that conducting reverse auctions is appropriate when using existing contract vehicles; and provide this information to contracting officials so that they can consider it when developing their acquisition strategies.(Recommendation 4)

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: DOD agreed with this recommendation and stated that the department expected to complete actions to address it by the end of calendar year 2018. In August 2019, Navy officials told us that they had reviewed data on reverse auctions to determine a root cause of single bidders, and describing the factors that indicate that conducting a reverse auction are appropriate. However, they had not yet provided this information to contracting officials as of July 2020.

Recommendation: The Secretary of the Navy should: document and provide information to contracting officials that describes available reverse auction providers and platforms, and any associated fee structures; and provide guidance, as appropriate, to contracting officials to ensure that they compare the options that are available to them when considering whether to use reverse auctions. (Recommendation 6)

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: DOD agreed with this recommendation and stated that the department expected to complete actions to address it by the end of calendar year 2018. In August 2019, Navy officials stated that memorandum of understanding with reverse auction providers, including fee information, are distributed to contracting officials. However, as of August 2020, they had not provided us with evidence that they had distributed a memorandum related to the primary reverse auction provider currently used by the Navy.

Recommendation: The NASA Associate Administrator for Human Exploration and Operations should direct the Commercial Crew Program to include the results of its schedule risk analysis in its mandatory quarterly reports to Congress. (Recommendation 1)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA did not concur with our recommendation that the Commercial Crew Program should include the results of its schedule analysis in its quarterly reports to Congress. In July 2019, NASA reaffirmed that it will be working to ensure that the contractors' schedules and the program's internal assessments sync up as the program gets closer to launch, which is the process it used in March 2019 leading up to SpaceX's uncrewed test flight. GAO continues to believe that the recommendation is valid because the program's schedule risk analysis would provide Congress with valuable insight into potential delays, which are likely.

Recommendation: The NASA Administrator should develop and maintain a contingency plan for ensuring a presence on the ISS until a Commercial Crew Program contractor is certified. (Recommendation 2)

Agency: National Aeronautics and Space Administration
Status: Open
Priority recommendation

Comments: NASA agreed with this recommendation. NASA stated that it is in discussions with Russia to obtain additional seats on its Soyuz spacecraft for NASA crew as a contingency plan. NASA is also providing Extra-Vehicular Activity and robotics training for a subset of cosmonauts to support U.S. Operating Segment operations, and looking at a possible extension of the duration of the Space X Demonstration 2 crewed test flight. In November 2019, NASA reported that it completed its actions for this recommendation. However, while NASA is working on potential solutions, there is no contingency plan in place. To fully implement this recommendation, NASA needs to provide documentation of its contingency plan.

Recommendation: The NASA Administrator should direct the Chief of Safety and Mission Assurance, the NASA Associate Administrator for Human Exploration and Operations, the Commercial Crew Program Manager, and the Commercial Crew Program Contracting Officer to collectively determine and document before the agency certification review how the agency will determine its risk tolerance level with respect to loss of crew. (Recommendation 3)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA partially concurred with our recommendation, stating it documented the agency's risk tolerance level with respect to loss of crew for the program in its May 2011 safety memo. NASA stated that ultimately the Commercial Crew Program is accountable for ensuring that the contractors' systems meet the loss of crew value of 1 in 270. In July 2019, the Commercial Crew Program noted that it will continue to determine its risk tolerance with respect to loss of crew and formally document its decisions at program management meetings. We continue to believe that, before agency certification, the key parties must collectively determine how the agency will determine its risk tolerance with response to loss of crew, as the risk tolerance for the loss of crew requirement depends on which entity is presenting the results of its analysis. We believe this approach will reduce confusion and increase transparency. In late September 2020, GAO received additional information from NASA on actions taken to implement this recommendation. We are currently assessing this information.

Recommendation: After completing the agency certification review, NASA's Chief Engineer and Chief of Safety and Mission Assurance, with support from the NASA Associate Administrator for Human Exploration and Operations and the Commercial Crew Program Manager, should document lessons learned related to loss of crew as a safety threshold for future crewed spaceflight missions, given the complexity of the metric. (Recommendation 4)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with our recommendation to document lessons learned related to the loss of crew requirement. In June 2020, NASA told us that they expect to take action to close this recommendation by the end of May 2021.

Recommendation: The Secretary of Commerce should evaluate the level of preparedness for cybersecurity personnel not currently holding certifications to take certification exams, identify strategies for mitigating any gaps identified, and report this information to Congress. (Recommendation 1)

Agency: Department of Commerce
Status: Open

Comments: Department of Commerce (Commerce) officials concurred with our recommendation and planned to evaluate the level of preparedness for cybersecurity personnel not currently holding certifications to take certification exams, and to identify strategies for mitigating any gaps identified. As of August 2020, Commerce had not provided sufficient evidence that it had implemented the recommendation. We will continue to monitor the situation.

Recommendation: The Secretary of Energy should evaluate the level of preparedness for cybersecurity personnel not currently holding certifications to take certification exams and report this information to Congress. (Recommendation 5)

Agency: Department of Energy
Status: Open

Comments: Department of Energy (DOE) officials concurred with our recommendation and planned to evaluate the level of preparedness for cybersecurity personnel not currently holding certifications to take certification exams using the National Initiative for Cybersecurity Education (NICE) certification mapping that is due for release in November 2018. DOE officials plan to develop criteria to identify personnel who are prepared to take certification exams and will perform a department-wide evaluation, after which they plan to report to Congress by a target date of September 30, 2019. As of August 2020, DOE had not provided evidence that it had implemented this recommendation. We will continue to monitor the situation.

Recommendation: The Secretary of the Interior should evaluate the level of preparedness for cybersecurity personnel not currently holding certifications to take certification exams and report this information to Congress. (Recommendation 11)

Agency: Department of the Interior
Status: Open

Comments: Department of the Interior (Interior) concurred with our recommendation. Officials from the department stated they were developing a plan to assess the workforce's preparedness to complete and maintain certifications. Interior officials stated that they were planning to leverage its learning and performance management system for assessing the level of preparedness of cybersecurity personnel to take certification exams and planned to report to Congress by March 2021. As of August 2020, HUD had not provided evidence that it had implemented this recommendation. We will continue to monitor the situation.

Recommendation: The Administrator of the National Aeronautics and Space Administration should evaluate the level of preparedness for cybersecurity personnel not currently holding certifications to take certification exams and report this information to Congress. (Recommendation 16)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: National Aeronautics and Space Administration (NASA) did not concur with our recommendation and has not yet provided evidence that it has implemented the recommendation as of August 2020. We will continue to monitor the situation.

Recommendation: The Administrator of the Small Business Administration should conduct a baseline assessment of the department's cybersecurity workforce that includes (1) the percentage of personnel with IT, cybersecurity, or other cyber-related job functions who hold certifications; (2) the level of preparedness of other cyber personnel without existing credentials to take certification exams; and (3) a strategy for mitigating any gaps identified with appropriate training and certification for existing personnel. (Recommendation 25)

Agency: Small Business Administration
Status: Open

Comments: Small Business Administration (SBA) officials concurred with our recommendation. SBA officials stated that they have made significant progress in the workforce assessment area, and have recently completed an assessment of the SBA's IT workforce and reported on existing skills gaps. SBA officials stated that they plan to execute against the IT workforce plan to include addressing requirements within the Federal Cybersecurity Workforce Assessment Act of 2015. As of August 2020, SBA had not provided evidence that it had implemented the recommendation. We will continue to monitor the situation.

Recommendation: The Administrator of the Small Business Administration should submit a report of its baseline assessment of its existing cybersecurity workforce to the appropriate congressional committees of jurisdiction. (Recommendation 26)

Agency: Small Business Administration
Status: Open

Comments: Small Business Administration (SBA) officials concurred with our recommendation. SBA officials stated that they have made significant progress in the workforce assessment area, and have recently completed an assessment of the SBA's IT workforce and reported on existing skills gaps. SBA officials stated that they plan to execute against the IT workforce plan to include addressing requirements within the Federal Cybersecurity Workforce Assessment Act of 2015. As of August 2020, SBA had not provided evidence that it had implemented the recommendation. We will continue to monitor the situation.

Recommendation: The Administrator of SBA should use its on-site and off-site reviews to routinely collect information on lenders' use of credit elsewhere criteria as part of its monitoring of lender practices related to the credit elsewhere requirement. (Recommendation 2)

Agency: Small Business Administration
Status: Open
Priority recommendation

Comments: For the second and third recommendations, related to lender's use of the credit elsewhere criteria as part of its monitoring of lender practices, on June 11, 2019, SBA provided information on 7(a) lender reviews and summary reports. On September 27, 2019, we discussed these recommendations and SBA's responses with an SBA official. Specifically, we discussed the role of statistical sampling in addressing lender practices and SBA's selection of lenders for further review. On November 22, 2019, an SBA official stated that the agency plans to provide additional documentation in six months to further support actions taken. We will continue to monitor SBA's efforts to address this recommendation.

Recommendation: The Administrator of SBA should analyze information on lenders' use of credit elsewhere criteria obtained from its reviews to identify lenders that may be at greater risk of noncompliance and to inform its selection of lenders for further review for credit elsewhere compliance. (Recommendation 3)

Agency: Small Business Administration
Status: Open
Priority recommendation

Comments: For the second and third recommendations, related to lender's use of the credit elsewhere criteria as part of its monitoring of lender practices, on June 11, 2019, SBA provided information on 7(a) lender reviews and summary reports. On September 27, 2019, we discussed these recommendations and SBA's responses with an SBA official. Specifically, we discussed the role of statistical sampling in addressing lender practices and SBA's selection of lenders for further review. On November 22, 2019, an SBA official stated that the agency plans to provide additional documentation in six months to further support actions taken. We will continue to monitor SBA's efforts to address this recommendation.

Recommendation: The Secretary of Defense should ensure that the Defense Laboratories Office routinely obtain and monitor defense laboratory hiring data to improve the oversight of the defense laboratories' use of hiring authorities. (Recommendation 1)

Agency: Department of Defense
Status: Open

Comments: DOD concurred with our recommendation and cited steps the department was and would be taking to improve oversight and coordination of the defense laboratories' hiring efforts. In June 2018, DOD acknowledged receipt of our final report and stated that the department's overall position on the report had not changed. We will provide further updates once additional information is received.

Recommendation: The Secretary of Defense should ensure that the Defense Laboratories Office develop performance measures to evaluate the effectiveness of the defense laboratories' use of hiring authorities as part of the labs' overall hiring to better inform future decision making about hiring efforts and policies. (Recommendation 2)

Agency: Department of Defense
Status: Open

Comments: DOD concurred with our recommendation and cited steps the department was and would be taking to improve oversight and coordination of the defense laboratories' hiring efforts. In June 2018, DOD acknowledged receipt of our final report and stated that the department's overall position on the report had not changed. We will provide further updates once additional information is received.

Recommendation: The Secretary of Defense should ensure that the Defense Laboratories Office, in collaboration with the Under Secretary of Defense for Personnel and Readiness and the Laboratory Quality Enhancement Panel's Personnel Subpanel, establish and document time frames for its coordination process to direct efforts across the relevant offices and help ensure the timely approval and implementation of hiring authorities. (Recommendation 3)

Agency: Department of Defense
Status: Open

Comments: DOD concurred with our recommendation and cited steps the department was and would be taking to improve oversight and coordination of the defense laboratories' hiring efforts. In June 2018, DOD acknowledged receipt of our final report and stated that the department's overall position on the report had not changed. We will provide further updates once additional information is received.

Recommendation: The Secretary of Agriculture should ensure that USDA includes all key monitoring provisions specified by applicable guidance as part of agreements with inter-American organizations. (Recommendation 2)

Agency: Department of Agriculture
Status: Open

Comments: USDA concurred with our recommendation and said that they will implement it, but has not provided any update on their efforts to implement the recommendation as of August 2019.

Recommendation: The Secretary of Agriculture should ensure that USDA officials have full documentation of required monitoring activities in agreements with inter-American organizations. (Recommendation 3)

Agency: Department of Agriculture
Status: Open

Comments: USDA concurred with our recommendation and said that they will implement it, but has not provided any update on their efforts to implement the recommendation as of August 2019.

Recommendation: The Secretary of State should direct the Bureau of International Narcotics and Law Enforcement Affairs to identify and address factors that affect the reliability of its democracy assistance data, such as miscoded or missing data. (Recommendation 1)

Agency: Department of State
Status: Open
Priority recommendation

Comments: Department of State concurred with this recommendation and said it would take steps to implement it. As of January 2020, State reported that its Bureau of the Comptroller and Global Financial Services and Bureau of Administration is expected to complete analysis in 2020 with an associated action plan to address the issues encountered by State's Bureau of International Narcotics and Law Enforcement Affairs (INL) and other bureaus understanding the importance of timely, accurate, complete, and quality data being reported to Federal Procurement Data System- Next Generation and USASpending.gov. State also provided GAO with an overview of its newly established processes in its accounting system to improve data reliability, including ensuring that current and future transactions would maintain coding integrity. State has taken a number of steps to identify and address factors that affect the reliability of its democracy assistance data, such as miscoded data. However, State needs to provide information on steps taken to identify and address other factors, in particular missing data, which affect the reliability of its democracy assistance data. When we confirm what further actions State has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of State should direct the Director of the Office of U.S. Foreign Assistance Resources to implement a process to improve the reliability, accessibility, and standardization of democracy assistance data across the geographic regions of the Bureaus of European and Eurasian Affairs and South and Central Asian Affairs, such as utilizing a centralized database for award data. (Recommendation 2)

Agency: Department of State
Status: Open

Comments: Department of State concurred with this recommendation and said it would take steps to implement it. In January 2020, State reported taking actions to implement the recommendation and we have requested documentation of these actions. In March 2019, Department of State reported that democracy assistance data for all bureaus, including the Bureaus of European and Eurasian Affair (EUR) and South and Central Asian Affairs (SCA), are being tracked and its quality is being improved through the Department's Foreign Assistance Data Review (FADR) process, an ongoing process chartered in September 2014 to understand and document the Department's challenges with capturing all foreign assistance activities from budget planning and allocation through obligation and disbursement in multiple State-owned budget, financial, and program management systems. State reported that through the FADR process, the Office of U.S. Foreign Assistance Resources (F) has been working with the Bureau of the Comptroller and Global Financial Services (CGFS), the Bureau of Administration (A), and bureaus that administer Foreign Assistance to better capture transaction data for all types of foreign assistance-including democracy, human rights, and governance data. State also reported that 13 U.S. Embassy Public Affairs Sections in EUR that receive assistance funding to carry out democracy programs and all 11 posts in SCA are recording their assistance funding awards in the centralized State Assistance Management System (SAMS), which is one of the Department's financial management systems that is used for reporting foreign assistance transactions to ForeignAssistance.gov.

Recommendation: The Secretary of Education should direct the Chief Operating Officer of FSA to establish and document a procedure for the destruction of records contained in electronic systems in accordance with approved disposition schedules. (Recommendation 1)

Agency: Department of Education
Status: Open

Comments: As of August 2019, FSA stated they have addressed the recommendation, but it is still undergoing an internal review. Once we receive documentation, we will determine if it addresses the recommendation.

Recommendation: The Secretary of Education should direct the Chief Operating Officer of FSA to ensure staff receive records management training annually. (Recommendation 2)

Agency: Department of Education
Status: Open

Comments: As of August 2019, FSA stated they have addressed the recommendation, but it is still undergoing an internal review. Once we receive documentation, we will determine if it addresses the recommendation.

Recommendation: The Secretary of Education should direct the Chief Operating Officer of FSA to conduct the triennial assessment of the FSA records management program. (Recommendation 3)

Agency: Department of Education
Status: Open

Comments: As of August 2019, FSA stated they have addressed the recommendation, but it is still undergoing an internal review. Once we receive documentation, we will determine if it addresses the recommendation.

Recommendation: The Secretary of Education should direct the Chief Operating Officer of FSA to ensure that privacy impact assessments address all required elements. (Recommendation 4)

Agency: Department of Education
Status: Open

Comments: As of August 2019, FSA stated they have addressed the recommendation, but it is still undergoing an internal review. Once we receive documentation, we will determine if it addresses the recommendation.

Recommendation: The Secretary of Education should direct the Chief Operating Officer of FSA to ensure that information security-related policies and procedures are reviewed at least annually, in accordance with FSA policy; updated as needed; and approved by security officials. (Recommendation 5)

Agency: Department of Education
Status: Open

Comments: As of August 2019, FSA stated they have addressed the recommendation, but it is still undergoing an internal review. Once we receive documentation, we will determine if it addresses the recommendation.

Recommendation: The Secretary of Education should update its regulation to include protections of personal information as an element of a school's ability to demonstrate its administrative capability. (Recommendation 7)

Agency: Department of Education
Status: Open

Comments: As of August 2019, FSA stated they have addressed the recommendation, but it is still undergoing an internal review. Once we receive documentation, we will determine if it addresses the recommendation.

Recommendation: The Under Secretary for Health should specify in VHA policy that reviews of providers' clinical care after concerns have been raised should be documented, including retrospective and comprehensive reviews. (Recommendation 1)

Agency: Department of Veterans Affairs
Status: Open

Comments: VA agreed with the recommendation and indicated plans to revise policy to codify requirements to document reviews. As of April 2020, VA estimates completing these and other revisions to the policy in August 2020.

Recommendation: The Under Secretary for Health should specify in VHA policy a timeliness requirement for initiating reviews of providers' clinical care after a concern has been raised. (Recommendation 2)

Agency: Department of Veterans Affairs
Status: Open

Comments: VA agreed with the recommendation and indicated plans to revise policy to incorporate timeline expectations for initiating reviews after clinical care concerns have been raised. As of April 2020, VA estimates completing these and other revisions to the policy in August 2020.

Recommendation: The Commandant of the Coast Guard should either develop new performance goals to address mission activity gaps, or explain in the Coast Guard's Annual Performance Report (APR) why certain aspects of mission performance are measured while others are not. (Recommendation 1)

Agency: Department of Homeland Security: United States Coast Guard
Status: Open

Comments: In October 2017, the Coast Guard concurred with our recommendation and stated that it would add new measures in future Annual Performance Reports (APRs) and explain what is measured and what is not, as appropriate. In May 2020, the Coast Guard provided GAO with its updated fiscal year 2019 APR. After reviewing the fiscal year 2019 APR, we found that the Coast Guard made revisions to the goals for the Ports, Waterways, and Coastal Security (PWCS) and Marine Environmental Protection-prevention activities (MEP) missions and added a goal for the Search and Rescue mission. However, the APR did not include additional goals or an explanation why certain aspects of mission performance are measured while others are not for the other performance goals we previously identified as not fully addressing all related mission activities. In its July 2020 update to this recommendation, the Coast Guard reported that the metrics published in the APR are measures of Coast Guard performance and not performance goals. The Coast Guard also noted that it continually evaluates the utility of its performance measures, and makes changes to individual measures, as well as its suite of measures, when doing so provides meaningful improvement. In its July 2020 update, the Coast Guard added that targets established for performance measures are intended to be realistic expectations of future performance and targets are continually evaluated and changed when current performance modify expectations. However, we continue to believe that in the absence of documentation explaining how existing performance goals address each mission, the extent to which the Coast Guard's performance goals encompass all of its mission activities is unclear. Either developing new goals to address mission activity gaps, or describing in the APR how existing goals sufficiently assess the performance of each mission could provide more meaningful information on progress in achieving Coast Guard's missions to executive branch decision makers, Congress, and the public. In order to fully implement the recommendation as intended, in instances in which performance goals do not fully address all of the respective mission activities, the Coast Guard's APR should include an explanation of the Coast Guard's rationale for why certain aspects of mission performance are measured while others are not. We will continue to follow-up on the Coast Guard's efforts to address this recommendation.

Recommendation: To improve technical expertise and overcome fragmentation, the CDC director of the Select Agent Program should work with APHIS to develop a joint workforce plan that assesses workforce and training needs for the program as a whole. This assessment should be done in conjunction with the development of the strategic plan. (Recommendation 10)

Agency: Department of Health and Human Services: Public Health Service: Centers for Disease Control and Prevention
Status: Open

Comments: CDC agreed with this October 2017 recommendation and, as of January 2020, CDC and APHIS were in the process of finalizing a joint workforce assessment focusing primarily on inspections, according to officials from the Select Agent Program. However, this joint assessment does not account for other aspects of the program, such as training, which was part of GAO's recommendation. According to Select Agent Program officials, the program is developing a new information system and officials plan to conduct a follow-up workload assessment once this new system is fully implemented, as they anticipate that the program will gain efficiencies once this new system is in place. Officials from the Select Agent Program said they did not have a definitive timeframe as to when the new system would be in place and a new workload assessment could be completed but, as of December 2019, they said it would be several years. Once the updated workforce assessment is completed, GAO will review it to determine if it fulfills the recommendation. Developing a joint workforce plan as recommended would help the program to better manage fragmentation by improving how it leverages resources, which in turn would help to ensure that all workforce and training needs are met.

Recommendation: To improve technical expertise and overcome fragmentation, the APHIS director of the Select Agent Program should work with CDC to develop a joint workforce plan that assesses workforce and training needs for the program as a whole. This assessment should be done in conjunction with the development of the strategic plan. (Recommendation 11)

Agency: Department of Agriculture: Animal and Plant Health Inspection Service
Status: Open

Comments: APHIS agreed with this October 2017 recommendation and, as of January 2020, CDC and APHIS were in the process of finalizing a joint workforce assessment focusing primarily on inspections, according to officials from the Select Agent Program. However, this joint assessment does not account for other aspects of the program, such as training, which was part of GAO's recommendation. According to Select Agent Program officials, the program is developing a new information system and officials plan to conduct a follow-up workload assessment once this new system is fully implemented, as they anticipate that the program will gain efficiencies once this new system is in place. Officials from the Select Agent Program said they did not have a definitive timeframe as to when the new system would be in place and a new workload assessment could be completed but, as of December 2019, they said it would be several years. Once the updated workforce assessment is completed, GAO will review it to determine if it fulfills the recommendation. Developing a joint workforce plan as recommended would help the program to better manage fragmentation by improving how it leverages resources, which in turn would help to ensure that all workforce and training needs are met.

Recommendation: The Director of the USMS should develop and implement a mechanism to provide specific feedback to employees on the results of the promotion process, including their readiness for promotion. (Recommendation 2)

Agency: Department of Justice: United States Marshals Service
Status: Open

Comments: USMS concurred with this recommendation and said that it is taking steps to implement it. In August 2018, USMS began providing feedback reports to employees completing the redesigned competency assessment process, which include detailed breakouts of scores by competency. However, these reports do not contain specific feedback, including the employee's readiness for promotion. As of June 2019, USMS is finalizing plans to provide training to employees on the GS-13 and GS-14 competencies. As of August 2020, USMS is building development programs and computer-based courses for each grade level, including GS-13 and GS-14. To fully address this recommendation, USMS should provide information on efforts or plans to provide specific feedback to employees, including on their readiness for promotion, and provide final training plans.

Recommendation: The Administrator of RHS should develop and implement a plan for ongoing monitoring, including testing and evaluation, of the obligation tool using relevant data. (Recommendation 1)

Agency: Department of Agriculture: Rural Housing Service
Status: Open

Comments: In June 2019, RHS said that implementing the recommendation would require information technology funding.

Recommendation: The Administrator of RHS should develop controls to check the reasonableness of rental assistance agreement amounts calculated by the obligation tool. (Recommendation 2)

Agency: Department of Agriculture: Rural Housing Service
Status: Open

Comments: In June 2019, RHS said that implementing the recommendation would require information technology funding.

Recommendation: The Administrator of RHS should develop controls to ensure that RHS uses the inflation rates from the President's economic assumptions in developing budget estimates. (Recommendation 3)

Agency: Department of Agriculture: Rural Housing Service
Status: Open

Comments: In June 2019, RHS said it would incorporate the recommended controls into the fiscal year 2021 budget cycle.

Recommendation: The Administrator of RHS should provide guidance to Rural Development state offices that specifies that prior to obligating funds, staff are to review information related to a property's mortgage servicing status. (Recommendation 4)

Agency: Department of Agriculture: Rural Housing Service
Status: Open

Comments: In June 2019, RHS said it was working toward providing the recommended guidance to Rural Development state offices.

Recommendation: The Associate Director of Merit System Accountability and Compliance should ensure that OPM's finalized records schedule on retaining conversion case files specifically lists all documentation that must be saved in its case files. (Recommendation 1)

Agency: Office of Personnel Management
Status: Open

Comments: In response to our recommendation, OPM drafted a retention schedule for its pre-appointment review case files. As of June 2019, according to OPM, National Archives and Records Administration (NARA) was in the process of reviewing the draft retention schedule. Once NARA approves and OPM finalizes the schedule, OPM will be better able to maintain complete documentation to justify conversion request decisions and ensure such documentation is available for subsequent review. On July 8, 2020, OPM informed us it is getting closer to fully responding to this recommendation and providing us with appropriate documentation to support is efforts.

Recommendation: In order to improve employee misconduct policies and procedures, the Secretary of Homeland Security should direct the FEMA Administrator to document policies and procedures to address potential Surge Capacity Force misconduct.

Agency: Department of Homeland Security
Status: Open

Comments: We found that the Federal Emergency Management Agency (FEMA) had developed and documented misconduct policies and procedures for most employees, but not its entire workforce. Specifically, FEMA had not documented misconduct policies and procedures for Surge Capacity Force members, who may augment FEMA's workforce in the event of a catastrophic disaster. As a result, we recommended that FEMA document policies and procedures to address potential Surge Capacity Force misconduct. In September 2017, FEMA officials reported taking action to address this recommendation. Specifically, FEMA distributed a memorandum to Federal Coordinating Officers and Federal Disaster Recovery Coordinators providing guidance on how and to whom to report allegations of misconduct by Surge Capacity Force members, coordination efforts regarding investigations, and how to address the member's duty status during the course of an investigation. FEMA stated that it will further address this recommendation by updating the FEMA Human Capital Plan for the Surge Capacity Force. As of August 2020, FEMA was finalizing a comprehensive Human Capital Guide based on lessons learned during the 2017 disaster season, which will address the Surge Capacity Force. This recommendation will remain open until the Human Capital Guide is completed.

Recommendation: In order to improve employee misconduct policies and procedures, the Secretary of Homeland Security should direct the FEMA Administrator to document Reservist disciplinary options and appeals policies and procedures that are currently in practice at the agency.

Agency: Department of Homeland Security
Status: Open

Comments: We found that the Federal Emergency Management Agency's (FEMA) policies and procedures for Reservist employees did not outline disciplinary options to address misconduct or address the appeals process available for Reservists. As a result, we recommended that FEMA document Reservist disciplinary options and appeals policies and procedures that are currently in practice at the agency. In September 2017, FEMA reported that the Office of Response and Recovery was drafting an addendum to the FEMA Reservist program manual. As of August 2020, FEMA was finalizing a FEMA Reservist Performance Management Directive which will provide agency-wide guidance for Reservist management and discipline. FEMA expects the directive to be completed by November 2020. This recommendation will remain open until the directive is complete.

Recommendation: In order to better identify and address trends in employee misconduct, the Secretary of Homeland Security should direct the FEMA Administrator to, once the quality of the data is improved, conduct routine reporting on employee misconduct trends.

Agency: Department of Homeland Security
Status: Open

Comments: We found that the Federal Emergency Management Agency (FEMA) did not regularly conduct trend analysis on misconduct cases, and that the quality of the data restricted the agency's ability to identify and address trends. As a result, we recommended that, once steps were taken to improve the quality of the data, FEMA should conduct routine reporting on employee misconduct trends. As of July 2020, FEMA's Office of Professional Responsibility (OPR) changed plans on which information system to use for reporting purposes due to cyber security concerns. According to FEMA officials, OPR will be using a DHS enterprise system and the system will be able to generate regular reporting. FEMA anticipates reporting functionality by October 2020. We will continue to monitor FEMA's efforts to address the recommendation.

Recommendation: To ensure the transparency and accountability of USDA's selection of countries to receive in-kind food aid, the Secretary of Agriculture should develop guidance to require documentation of the reasons for providing funding to countries that were not on the priority list.

Agency: Department of Agriculture
Status: Open

Comments: The agency agreed with our recommendation. As of February 2020, USDA has not developed guidance to require documentation of the reasons for providing funding to countries that were not on the priority list. In November 2019, USDA officials notified GAO that the responsible USDA office had reorganized, which has caused a delay in their response.

Recommendation: To help ensure that, consistent with the Bellmon amendment, the provision of U.S. in-kind food aid does not result in a substantial disincentive to, or interference with, domestic production or marketing in countries receiving in-kind food aid, the Secretary of Agriculture should monitor markets during implementation of McGovern-Dole projects to identify any potential negative effects, such as unusual changes in prices.

Agency: Department of Agriculture
Status: Open

Comments: The agency agreed with our recommendation. USDA reported that proposed McGovern-Dole commodities are selected in coordination with the host governments in order to ensure they will not disrupt local production, markets, or food prices. However, as of February 2020, USDA has not taken action to monitor markets during implementation of McGovern-Dole projects to identify whether any potential negative effects have occurred, such as disruptions of local production or unusual changes in food prices. In November 2019, USDA officials notified GAO that the responsible USDA office had reorganized, which has caused a delay in their response.

Recommendation: To help ensure that, consistent with the Bellmon amendment, the provision of U.S. in-kind food aid does not result in a substantial disincentive to, or interference with, domestic production or marketing in countries receiving in-kind food aid, the Secretary of Agriculture should evaluate markets after the completion of McGovern-Dole and Food for Progress projects to determine whether markets were negatively affected during project implementation or after project completion.

Agency: Department of Agriculture
Status: Open

Comments: The agency agreed with our recommendation, and has reported actions to address the recommendation. GAO has requested documentation from USDA to confirm the actions taken. As of February 2020, USDA has not provided documentation confirming actions taken. In November 2019, USDA officials notified GAO that the responsible USDA office had reorganized, which has caused a delay in their response.

Recommendation: To improve the management of the Armed Forces Sports Program and better determine whether the program is achieving its desired results, the Secretary of Defense should direct the Under Secretary of Defense for Personnel and Readiness to develop and implement performance measures for the Armed Forces Sports Program that measure the desired outcomes for the program and, at a minimum, demonstrate linkage to the program's goals or mission, have a measurable target, and include a baseline that can be used to demonstrate program performance.

Agency: Department of Defense
Status: Open

Comments: DOD concurred with our recommendation. As of September 2019, DOD officials stated that the Armed Forces Sports Council approved performance measures for the Armed Forces Sports Program at a council meeting held in April 2018. Officials said the approved performance measures went into effect in January 2019 in conjunction with the Armed Forces Sports Program's 2019 calendar year. Officials said that the baseline year for the performance measures is 2019 which they are currently collecting data for. Officials plan to provide an update on the program once they have collected and reviewed the 2019 baseline year performance measures. Additionally, officials said that OSD is working to update DOD Instruction 1330.04 to require the Armed Forces Sports Council to develop and implement performance measures for the Armed Forces Sports Program and review and track performance metrics annually. The DOD Instruction language has been updated and is currently pending review prior to the start of formal coordination.

Recommendation: To enhance information available to operational unit managers, the Secretary of Commerce should direct the director of NOAA's WFMO to ensure that complete information on hiring requests is routinely communicated to NWS managers throughout the three phases of the hiring process, such as by supporting the development of improved tracking and reporting capabilities in the planned new Commerce-wide data system.

Agency: Department of Commerce
Status: Open

Comments: The agency agreed with our recommendation. As of June 2020, the agency had taken some action, but had not fully implemented it. We will update this recommendation's status as we receive more information.

Recommendation: To help ensure that efforts to address smuggling through cross-border tunnels, ultralight aircraft, panga boats, and recreational vessels are effective and that managers and stakeholders have the information needed to make decisions, the Secretary of Homeland Security should direct the Commissioner of CBP to assess and document how the alternative technological solutions being considered will fully meet operational needs related to ultralight aircraft.

Agency: Department of Homeland Security
Status: Open

Comments: DHS concurred with this recommendation and stated that it plans to assess and document requirements related to ultralight aircraft threats and how technological solutions will address these requirements as part of U.S. Customs and Border Protection (CBP) Air and Marine Operations (AMO) air domain awareness efforts. In March 2018, CBP completed an Air Domain Awareness Capability Analysis Report that identifies current capability gaps, including those related to ultralight aircraft. CBP stated that it plans to build upon the Capability Analysis Report to identify mission needs, a concept of operations, and operational requirements to address ultralight aircraft and other threats in the air domain. In February 2020, AMO reported that, in 2019, it conducted a technical assessment of one technology and plans to assess other systems in 2020 and 2021 to help determine if they fit into AMO's larger strategic vision for persistent wide area surveillance to address ultralight aircraft and other threats in the air domain. To fully address our recommendation, CBP should assess and document how alternative solutions will meet operational requirements related to ultralight aircraft.

Recommendation: To help ensure that efforts to address smuggling through cross-border tunnels, ultralight aircraft, panga boats, and recreational vessels are effective and that managers and stakeholders have the information needed to make decisions, the Secretary of Homeland Security should direct the Commissioner of CBP and the Director of ICE to jointly establish and monitor performance measures and targets related to cross-border tunnels.

Agency: Department of Homeland Security
Status: Open

Comments: DHS concurred with this recommendation and stated that U.S. Customs and Border Protection and U.S. Immigration and Customs Enforcement will review available information and develop performance measures and targets as deemed appropriate. As of March 2020, CBP and ICE have not reported taking any actions to develop performance measures and targets. To fully address our recommendation, CBP and ICE should establish and monitor performance measures and targets related to cross-border tunnels.

Recommendation: To help ensure that efforts to address smuggling through cross-border tunnels, ultralight aircraft, panga boats, and recreational vessels are effective and that managers and stakeholders have the information needed to make decisions, the Secretary of Homeland Security should direct the Commissioner of CBP to establish and monitor performance targets related to ultralight aircraft.

Agency: Department of Homeland Security
Status: Open

Comments: DHS concurred and stated that within U.S. Customs and Border Protection (CBP), Air and Marine Operations and the U.S. Border Patrol are developing a joint performance measure and targets for interdicting ultralight aircraft. However, in December 2019, CBP reported that it will no longer pursue establishing a performance measure because it found that the ultralight aircraft interdiction rate fluctuated year to year, and that the number of ultralight aircraft incidents had been trending downward. Subsequently, in September 2020, CBP officials stated that they had reinitiated efforts to develop a performance measure and target in response to our continued belief that they can be set and would help CBP monitor performance to ensure that technology investments and operational responses to address ultralight aircraft are effective. To fully address our recommendation, CBP should establish a measure and monitor performance related to ultralight aircraft.

Recommendation: To help ensure that efforts to address smuggling through cross-border tunnels, ultralight aircraft, panga boats, and recreational vessels are effective and that managers and stakeholders have the information needed to make decisions, the Secretary of Homeland Security should direct the U.S. Customs and Border Protection (CBP)-U.S. Immigration and Customs Enforcement (ICE) tunnel committee to convene and establish standard operating procedures for addressing cross-border tunnels, including procedures for sharing information.

Agency: Department of Homeland Security
Status: Open

Comments: DHS did not concur with this recommendation. However, CBP and ICE agreed that strengthening operational procedures may be beneficial and stated that they will jointly review procedures and discuss revising and/or consolidating the procedures. In May 2018, CBP stated that it is looking for opportunities to standardize procedures for the detection, interdiction, mapping, and remediation of cross-border tunnels. To this end, CBP has plans to develop a standardized training on tunnel identification and tactics, techniques, and procedures for different types of tunnels. In addition, CBP is working to develop a consistent process that will facilitate coordination and collaboration with ICE. In March 2019, CBP reported that CBP and ICE have begun to routinely meet to collectively develop processes for using tunnel robotics, including processes to enhance communication between CBP and ICE. In September 2020, CBP and ICE reported that they do not plan to take any additional steps to address this recommendation. To fully address our recommendation, CBP and ICE should establish standardized procedures for addressing tunnels, including procedures for sharing information with one another.

Recommendation: To help ensure that efforts to address smuggling through cross-border tunnels, ultralight aircraft, panga boats, and recreational vessels are effective and that managers and stakeholders have the information needed to make decisions, the Secretary of Homeland Security should direct the Commandant of the Coast Guard, Commissioner of CBP, and the Director of ICE to establish and monitor Regional Coordinating Mechanisms performance measures and targets related to panga boat and recreational vessel smuggling.

Agency: Department of Homeland Security
Status: Open

Comments: DHS did not concur with this recommendation. DHS stated that that it believes that by establishing common terminology to address our first recommendation, the RECOMs will have more reliable, usable analyses to inform their maritime interdiction efforts. However, DHS did not believe that performance measures and targets related to smuggling by panga boats would provide the most useful strategic assessment of operations to prevent all illicit trafficking, regardless of area of operations or mode of transportation. DHS also cited the recent creation of the DHS Office of Policy, Strategy, and Plans that is to work with U.S. Coast Guard, U.S. Customs and Border Protection, U.S. Immigration and Customs Enforcement, and other components and offices to better evaluate the effectiveness of all operations that work to prevent the illegal entry of goods and people into the country, as appropriate. In February 2020, DHS reported that the department had not taken any further actions to implement this recommendation. We continue to believe that the recommendation is valid and will monitor any actions DHS takes that are responsive to it. For example, in response to a requirement in the National Defense Authorization Act for Fiscal Year 2017, DHS issued reports in May 2018, February 2019, and August 2020 that contain metrics and planned metrics to measure the effectiveness of border security in the maritime environment and other domains. Planned metrics that DHS does not yet have a methodology to measure across all components include situational awareness in the maritime environment, illicit drugs removal rate, and DHS maritime threat response rate. To fully address our recommendation, DHS should measure its performance related to smuggling across U.S. maritime borders.

Recommendation: To improve consistency in CMS oversight of federal spending under section 1115 demonstrations, the Secretary of Health and Human Services should require the Administrator of CMS to develop and document standard operating procedures for monitoring spending under demonstrations that (1) require setting reporting requirements for states that provide CMS the data elements needed for CMS to assess compliance with demonstration spending limits; (2) require consistent enforcement of states' compliance with financial reporting requirements; and (3) require consistent tracking of the amount of unspent funds under demonstration spending limits.

Agency: Department of Health and Human Services
Status: Open

Comments: The Department of Health and Human Services (HHS) has taken steps to improve the consistency of oversight of federal spending under section 1115 demonstrations. In November 2018, HHS officials reported that they have developed draft guidance, including a standard reporting tool for states, to better ensure consistent reporting of the elements needed to assess compliance with demonstration spending limits and was in the process of testing the tool with two states. In addition, the agency is developing standard operating procedures for agency staff to require consistent tracking of unspent funds under the spending limit. As of November 2019, HHS has not provided any updates. GAO will continue to monitor HHS's actions and once procedures are in place, GAO will assess whether they address our recommendation.

Recommendation: To improve management and oversight of the SAVE program, the director of USCIS should develop and implement a mechanism to oversee agencies' completion of training on additional verification in accordance with SAVE MOA provisions and program policies.

Agency: Department of Homeland Security: United States Citizenship and Immigration Services
Status: Open

Comments: In March 2017, we found that USCIS does not track or monitor whether SAVE users have completed training and therefore does not have reasonable assurance that users have mastered SAVE policies and procedures prior to accessing the system. We recommended that USCIS develop and implement a mechanism to oversee agencies' completion of training on additional verification in accordance with SAVE provisions and program policies. The USCIS Verification Division reported that it planned to address providing additional training for SAVE users developed by December 31, 2017. The SAVE Program would then offer training events for agencies on the new material reflecting the agency user requirements for additional verification as well as system enhancements. In September 2017, the Verification Division implemented part one of this recommendation, a monthly webinar training session on user agency responsibilities and additional verification. This training can also be delivered to user agencies upon request. For part two of this recommendation, the SAVE program also developed training features to oversee agencies' completion of training. These training features are a system enhancement that will be incorporated into SAVE's overall modernization effort and was expected to be completed by September 30, 2019. In the interim, SAVE is implementing several other enhancements that will reduce the number of cases sent to additional verification, including the completion of modernized matching logic and initial verification screens and retiring less efficient access methods. In September 2019, SAVE officials told us that SAVE has reduced the number of cases sent to additional verification by retiring inefficient access methods and completing modernization of SAVE matching logic and initial verification screens. However, SAVE officials said they also determined that they must update the SAVE tutorial platform and content to account for these and other changes. Officials said that while SAVE is updated, the program continues to provide training, resources, and other support to user agencies to help ensure they are performing additional verification in accordance with SAVE MOA provisions and program policies. The new estimated completion date is February 28, 2021.

Recommendation: In order for drug sponsors to benefit from FDA's revised guidance on antibiotic development and take full advantage of the QIDP designation, FDA should develop and make available written guidance on the QIDP designation that includes information about the process a drug sponsor must undertake to request the fast track designation and how the agency is applying the market exclusivity incentive.

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: According to HHS, FDA issued draft guidance (a document of frequently asked questions) in January of 2018 that describes the QIDP designation. However, this document is in draft form and has not yet been finalized. As of August 2020, FDA reported it is working to finalize this guidance this year. GAO will revisit this recommendation when the final guidance is issued.

Recommendation: To improve efforts to promote EHR use and electronic exchange of health information in post-acute care settings, the Secretary of Health and Human Services should direct CMS and ONC to comprehensively plan for how to achieve the department's goal related to the use of EHRs and electronic information exchange in post-acute care settings. This planning may include, for example, identifying specific actions related to post-acute care settings and identifying and considering external factors.

Agency: Department of Health and Human Services
Status: Open

Comments: HHS concurred with this recommendation. As of February 2020, HHS provided information describing actions it has taken to help increase the use of EHRs and electronic information exchange in post-acute care settings. These actions are important, but do not address the comprehensive planning that GAO recommended. To fully implement this recommendation, HHS should provide information to show comprehensive planning for how HHS's specific actions are expected to lead to achieving the goal of increasing the use of EHRs and electronic information exchange in post-acute settings.

Recommendation: To assist IRA owners in addressing challenges associated with investing their retirement savings in unconventional assets, the Commissioner of Internal Revenue should provide guidance to IRA owners and custodians on how to determine and document fair market value (FMV) for certain categories of hard-to-value unconventional assets. For example, IRS could consider updating Form 5498 instructions to custodians on how to document FMV for hard-to-value assets (e.g., last-known FMV based on independent appraisal, acquisition price) and provide guidance directed at account owners that provides examples of how to ascertain FMV for different types of unconventional assets.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed that guidance should be provided to IRA owners and custodians. In 2018, IRS stated that it had discussed this issue with Counsel and Treasury, and it was agreed that fair market value would be a part of the IRA guidance project under the 2017 Priority Guidance Plan. IRS officials said that these new regulations would address FMV for certain categories of hard-to-value unconventional assets. IRS further noted that it would be premature to modify instructions and guidance to custodians on how to determine and document FMV for hard-to- value assets until the new regulations are issued. In their October 2019 update of planned guidance projects, Treasury's Office of Tax Policy and IRS still listed planned IRA regulations. GAO will not close this recommendation as implemented until the new valuation guidance is issued.

Recommendation: To enhance DOD's efforts to better integrate and improve intelligence support to major defense acquisition programs, and to better enable personnel to provide intelligence inputs to their portfolios of acquisition programs, the Secretary of Defense should direct--as appropriate--the Under Secretary of Defense for Acquisition, Technology, and Logistics; the Under Secretary of Defense for Intelligence; and/or the Secretaries of the military departments, in coordination with one another, to establish certifications that include having these personnel complete required training.

Agency: Department of Defense
Status: Open

Comments: The Department of Defense (DOD) concurred with the recommendation. DOD provided corrective action plans that show they expect to complete efforts that will address this recommendation in 2019. We will continue to monitor the status of DOD's actions and whether these actions address the intent of our recommendations.

Recommendation: To enhance DOD's efforts to better integrate and improve intelligence support to major defense acquisition programs, and to facilitate implementation of improved processes and procedures developed by the Acquisition Intelligence Requirements Task Force and by the Air Force for the integration of intelligence into major defense acquisition programs, the Secretary of Defense should direct--as appropriate--the Under Secretary of Defense for Acquisition, Technology, and Logistics; the Under Secretary of Defense for Intelligence; and/or the Secretaries of the military departments, in coordination with one another, to revise relevant guidance and procedures--including DOD Instruction 5000.02 and DOD Directive 5250.01-- require that intelligence mission data at the acquisition program, service, and department levels be prioritized.

Agency: Department of Defense
Status: Open

Comments: The Department of Defense (DOD) concurred with the recommendation. DOD provided corrective action plans that show they expect to complete efforts that will address this recommendation in 2019. We will continue to monitor the status of DOD's actions and whether these actions address the intent of our recommendations.

Recommendation: To enhance DOD's efforts to better integrate and improve intelligence support to major defense acquisition programs, and to better ensure that DOD obtains useful feedback from stakeholders and the intended users of the Validated Online Lifecycle Threat tool, the Secretary of Defense should direct--as appropriate--the Under Secretary of Defense for Acquisition, Technology, and Logistics; the Under Secretary of Defense for Intelligence; and/or the Secretaries of the military departments, in coordination with one another, to instruct the Director of the Defense Intelligence Agency to develop a communication plan for the tool that includes plans for communicating with and obtaining feedback from stakeholders and intended users such as acquisition program offices and personnel providing intelligence support to acquisition programs.

Agency: Department of Defense
Status: Open

Comments: The Department of Defense (DOD) concurred with the recommendation. DOD provided corrective action plans that show they expect to complete efforts that will address this recommendation by the end of 2018. We will continue to monitor the status of DOD's actions and whether these actions address the intent of our recommendations.

Recommendation: To enhance DOD's efforts to better integrate and improve intelligence support to major defense acquisition programs, and to ensure that it fulfills the needs of acquisition programs and the intelligence community and works as intended, the Secretary of Defense should direct--as appropriate--the Under Secretary of Defense for Acquisition, Technology, and Logistics; the Under Secretary of Defense for Intelligence; and/or the Secretaries of the military departments, in coordination with one another, to assess the need for the Acquisition Intelligence Support Assessment tool and, if validated by this assessment, define this tool's requirements for development and identify the entity responsible for providing oversight and funding for its continued development, implementation, and operation.

Agency: Department of Defense
Status: Open

Comments: The Department of Defense (DOD) concurred with the recommendation. DOD provided corrective action plans that show they expect to complete efforts that will address this recommendation sometime in the future. We will continue to monitor the status of DOD's actions and whether these actions address the intent of our recommendations.

Recommendation: To implement DOD guidance requiring the military departments to prepare readiness and Operation and Maintenance (O&M) budget impact assessments during drawdown planning, the Secretary of Defense should direct the Secretaries of the military departments to develop guidance that assigns responsibility for the preparation of impact assessments and includes direction on how such assessments should be conducted as part of drawdown planning.

Agency: Department of Defense
Status: Open

Comments: In commenting on the draft report, DOD concurred with the recommendation. As of August 2018, we are in the process of following up with the department to determine the current status.

Recommendation: To implement DOD guidance requiring the military departments to prepare readiness and O&M budget impact assessments during drawdown planning, the Secretary of Defense should direct the Director, DSCA, to develop an internal control mechanism to determine whether the military departments have completed the required impact assessments before moving forward with drawdown planning and execution.

Agency: Department of Defense
Status: Open

Comments: In commenting on the draft report, DOD concurred with the recommendation. As of August 2018, we are in the process of following up with the department to determine the current status.

Recommendation: To improve the management of DOD's credentialing program and better determine whether the program is achieving its desired results, the Secretary of Defense should direct the Under Secretary of Defense for Personnel and Readiness to develop and implement program performance measures that include key attributes, such as a baseline and goals, that can be used to assess performance.

Agency: Department of Defense
Status: Open

Comments: DOD did not concur with our recommendation to develop and implement performance measures for its credentialing program. In its response to the recommendation, DOD stated that servicemembers are not required to earn credentials and more than half of the credentials earned by servicemembers are voluntary. Therefore, establishing criteria that might create an incentive to force servicemembers into earning voluntary credentials would be counterproductive. DOD also stated that a basic reporting system is in place that captures credential attainment and associated costs that provides basic information to gauge the program's performance. As of April 2020, the department still does not plan to develop performance measures for the program.

Recommendation: To ensure that Field Collection program case selection processes support IRS's and the Collection program's mission, including applying tax laws with integrity and fairness to all, the Commissioner of Internal Revenue should develop, document, and communicate Field Collection program and case selection objectives, including the role of fairness, in clear and measurable terms sufficient for use in internal control.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation and described actions being taken to address it. In June 2019, IRS officials told us they were beginning an initiative designed to help identify a program's objectives in relationship to the IRS Strategic Plan and that Field Collection was chosen as one of the pilot programs for this initiative. In September 2020, IRS officials provided us draft program and case selection objectives and said they expected to complete actions to implement the recommendation in Fall 2020.

Recommendation: To ensure that Field Collection program case selection processes support IRS's and the Collection program's mission, including applying tax laws with integrity and fairness to all, the Commissioner of Internal Revenue should develop, document, and implement performance measures clearly linked to the Field Collection program and case selection objectives.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation and outlined planned actions to address it. In June 2019, IRS officials told us they were beginning an initiative designed to help identify a program's objectives in relationship to the IRS Strategic Plan and that Field Collection was selected as one of the pilot programs for this initiative. In September 2020, IRS officials provided us draft program and case selection objectives and said they expected to complete actions to implement the recommendation in Fall 2020.

Recommendation: To ensure that Field Collection program case selection processes support IRS's and the Collection program's mission, including applying tax laws with integrity and fairness to all, the Commissioner of Internal Revenue should incorporate program and case selection objectives into existing risk management systems or use other approaches to identify and analyze potential risks to achieving those objectives so that Field Collection can establish risk tolerances and appropriate control procedures to address risks.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation and outlined planned actions to address it. In June 2019, IRS officials told us they were beginning an initiative designed to help identify a program's objectives in relationship to the IRS Strategic Plan and that Field Collection was selected as one of the pilot programs for this initiative. Since program and case selection objectives are necessary before appropriate risk management systems can be established, in September 2020, IRS officials said they expected to complete actions to implement program and case selection objectives in Fall 2020 but provided no anticipated completion date for actions to identify and analyze potential risks to those objectives and related risk management actions.

Recommendation: To ensure that Field Collection program case selection processes support IRS's and the Collection program's mission, including applying tax laws with integrity and fairness to all, the Commissioner of Internal Revenue should develop, document, and communicate control procedures guidance for group managers to exercise professional judgment in the Field Collection program case selection process to achieve fairness and other program and collection case selection objectives.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation and described actions it will take to address it. In June 2019, IRS officials told us they are beginning an initiative designed to help identify a program's objectives in relationship to the IRS Strategic Plan. IRS selected Field Collection as one of the pilot programs for this initiative which would include actions to address this recommendation. In September 2020, IRS officials said they had revised the Internal Revenue Manual to guide group managers on elements to consider in selecting cases. We will update the status of IRS's actions to implement the recommendation after review of any documentation IRS provides.

Recommendation: To ensure that Field Collection program case selection processes support IRS's and the Collection program's mission, including applying tax laws with integrity and fairness to all, the Commissioner of Internal Revenue should develop, document, and implement procedures to periodically monitor and assess the design and operational effectiveness of both automated and manual control procedures for collection case selection to assure their continued effectiveness in achieving program objectives.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation and outlined planned actions to address it. In June 2019, IRS officials told us they are beginning an initiative designed to help identify a program's objectives in relationship to the IRS Strategic Plan. IRS selected Field Collection as one of the pilot programs for this initiative. According to IRS officials, this pilot effort is ongoing and includes consideration of how the agency will address this recommendation. In September 2020, we met with IRS officials to discuss the status of actions to implement this recommendation but no anticipated completion date was provided.

Recommendation: To improve the Navy's implementation of the FIAR Guidance for its General Fund FBWT FIP and facilitate efforts to achieve SBR auditability, the Secretary of the Navy should direct the Assistant Secretary of the Navy, Financial Management and Comptroller, to prepare a level I quantitative drilldown in accordance with the FIAR Guidance.

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: The Navy concurred with this recommendation and stated that it has actions planned, taken, or under way to prepare a quantitative drilldown. In September 2017, Navy provided a listing of certain systems (DCAS, GLs, DDRS-B, and DDRS-AFS) it considered as Level 1 assessable units. However, the listing did not include a drilldown from the financial statement amounts through DDRS-AFS, DDRS-B, and DCAS to the receipt and disbursement source systems. In July 2020, Navy officials stated that Navy is implementing a new system that will enable them to complete a quantitative drill down for its Fund Balance with Treasury (FBWT). The new system is not expected to be fully implemented until March 2021. In the interim, certain FBWT reconciliations are performed at DFAS, that may provide a drilldown capability of FBWT as reported in financial statements to the applicable general ledger amounts.

Recommendation: To improve the Navy's implementation of the FIAR Guidance for its General Fund FBWT FIP and facilitate efforts to achieve SBR auditability, the Secretary of the Navy should direct the Assistant Secretary of the Navy, Financial Management and Comptroller, to prioritize audit readiness efforts for the key FBWT systems, prepare an audit strategy that identifies for each system (1) the Navy's plan for assessing the system to gain assurance that the system can be relied on; (2) the assessment types, including prioritizing the assessments based on qualitative and quantitative factors for each system; and (3) planned start and completion dates of these assessments for each system.

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: The Navy concurred with this recommendation and stated that it has actions planned, taken, or under way to prioritize audit readiness efforts for key Fund Balance with Treasury (FBWT) systems. In September 2017, Navy provided documentation for three systems, but this documentation did not address corrective actions for ineffective controls and the expected completion dates. Further, during our audit, Navy provided a list of 22 relevant systems. In July 2020, Navy officials stated that they are preparing an audit strategy for each system, and documenting control activities and computer controls for significant systems. We will continue to follow-up on the status of this recommendation.

Recommendation: To improve the Navy's implementation of the FIAR Guidance for its General Fund FBWT FIP and facilitate efforts to achieve SBR auditability, the Secretary of the Navy should direct the Assistant Secretary of the Navy, Financial Management and Comptroller, to prepare, in accordance with FIAR Guidance, the documentation of control activities and information technology general computer controls for significant systems; system certifications or accreditations; system, end user, and systems documentation locations; and hardware, software, and interfaces.

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: The Navy concurred with this recommendation and stated that it had actions planned, taken, or under way to document control activities, information technology general computer controls for significant systems, systems documentation locations, and hardware, software, and interfaces. In September 2017, Navy provided documentation for 3 systems, but the documentation did not include system certifications or accreditations; system, end user, and systems documentation locations; and hardware, software, and interfaces. Further, during our audit, Navy provided a list of 22 relevant systems. In July 2020, a Navy official told us that they are preparing an audit strategy for each system, and documenting control activities and computer controls for significant systems. We will continue to monitor Navy's progress addressing this recommendation.

Recommendation: To improve the Navy's implementation of the FIAR Guidance for its General Fund FBWT FIP and facilitate efforts to achieve SBR auditability, the Secretary of the Navy should direct the Assistant Secretary of the Navy, Financial Management and Comptroller, to prepare an internal control assessment document for each assessable unit, summarizing control activities that are appropriately designed and in place.

Agency: Department of Defense: Department of the Navy
Status: Open

Comments: The Navy concurred with this recommendation and stated that it had actions planned, taken, or under way to prepare an internal control assessment document. In September 2017, Navy provided support for actions taken to address this recommendation. However, the documentation provided did not summarize controls by assessable unit (DCAS, DDRS-B, or systems). Instead controls were listed by function (Treasury Reporting, Audit Readiness, and Departmental Reporting). In July 2020, a Navy official stated that documentation of overall Fund Balance with Treasury (FBWT) controls is in process and they are finalizing the Risk Control Matrix for FBWT to include controls at DFAS and at Treasury. The Rick Control Matrix is estimated to be completed by the end of August 2020. We will continue to monitor the progress in addressing this recommendation.

Recommendation: If DHS's proposed CBRNE program consolidation is approved by Congress, the Secretary of Homeland Security should direct the Assistant Secretary for the Office of Policy to use, where appropriate, the key mergers and organizational transformation practices identified in our previous work to help ensure that a CBRNE consolidated office benefits from lessons learned from other organizational transformations.

Agency: Department of Homeland Security
Status: Open

Comments: We found that key mergers and organizational transformation practices identified in previous GAO work could benefit the Department of Homeland Security (DHS) during implementation of the proposed CBRNE consolidation. As a result, we recommended that should Congress approve DHS's CBRNE consolidation plan, the department use these key mergers and organizational transformation practices. In December 2018, the Countering Weapons of Mass Destruction Act of 2018 was enacted into law (Public Law 115-387) authorizing the proposed consolidation of CBRNE functions into a new Countering Weapons of Mass Destruction Office (CWMD office). In a memo to Congress regarding the new CWMD office, DHS stated that it remained committed to evaluating GAO's identified practices when implementing the consolidation. In August 2019, DHS provided us with information outlining efforts to use the key mergers and organizational transformation practices during the CWMD implementation phase. However, we requested additional evidence that all practices were considered. For example, one of the key practices is to use the performance management system to define responsibility and assure accountability for change. DHS created position descriptions for CWMD office leadership but we did not receive evidentiary support to demonstrate that DHS has added CWMD office transition goals to relevant employee performance plans. In April 2020, DHS estimated June 2020 for completing steps responsive to this recommendation. We will update the status of this recommendation as additional information is made available.

Recommendation: To help IRS improve its process for determining IT funding priorities and to provide timely information on the progress of its investments, the Commissioner of IRS should direct the Chief Technology Officer to establish, document, and implement policies and procedures for selecting new and reselecting ongoing business systems modernization activities, consistent with IRS's process for prioritizing operations support priorities, which addresses (1) prioritization and comparison of IT assets against each other, (2) criteria for making selection and prioritization decisions, and (3) ensuring IRS executives' final funding decisions on IT proposals are based on IRS's prioritization process.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In September 2018, IRS provided GAO a slide deck titled "Prioritization Process for the Business Systems Modernization (BSM) Program/Projects" which describes a process for prioritizing BSM investments and capabilities within the investments. However, the slides were labeled "pre-decisional." In addition, they did not include specific procedures for prioritizing investments. In April 2020, IRS informed us that it had moved its target for fully implementing the recommendation to November 2020. We will continue to monitor IRS's efforts to implement the recommendation.

Recommendation: To help IRS improve its process for determining IT funding priorities and to provide timely information on the progress of its investments, the Commissioner of IRS should direct the Chief Technology Officer to modify existing processes for Foreign Account Tax Compliance Act (FATCA) and Return Review Program (RRP) for measuring work performed by IRS staff to incorporate best practices, including accounting for actual work performed and using the level of effort measure sparingly.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In May 2018, IRS told GAO it had implemented the recommendation. As supporting evidence, the agency provided an April 2018 update to its Investment Performance Tool user guide along with briefing slides specifying actions taken to modify its processes to measure work performed by IRS staff. We reviewed the evidence provided and determined that it was not sufficient to close the recommendation as implemented. Specifically, while the Investment Performance Tool user guide included updated procedures for measuring work performed by IRS staff which aligned with best practices, it did not clearly state that earned value (or work performed) during an iteration should always be based on to the percentage of planned features or user stories that were completed for that iteration. In addition, IRS did not provide evidence that it had used its updated procedures for the Return Review Program investment. We followed up with IRS to obtain this documentation. The agency subsequently provided the requested documentation to us and, as of July 2020, we were reviewing it to determine the extent to which it addresses the recommendation.

Recommendation: To ensure effective and appropriate recovery of DI overpayments and administration of penalties and sanctions, the Acting Commissioner of the Social Security Administration should clarify its policy for assessing the reasonableness of expenses used in determining beneficiaries' repayment amounts to help ensure that withholding plans are consistently established across the agency and accurately reflect individuals' ability to pay.

Agency: Social Security Administration
Status: Open

Comments: As of June 2020, SSA reported taking a number of steps to address this recommendation. According to SSA, it updated its guidance in 2017 to help ensure that staff consistently process various requests from overpaid individuals. SSA also reported that it is taking additional steps to update instructions on how staff should consider whether expenses reported by individuals are reasonable when approving withholding plans. The agency expects these instructions to be complete by the end of fiscal year 2021. We will close this recommendation once SSA releases additional guidance on assessing the reasonableness of expenses.

Recommendation: To ensure effective and appropriate recovery of DI overpayments and administration of penalties and sanctions, the Acting Commissioner of the Social Security Administration should adjust the minimum withholding rate to 10 percent of monthly DI benefits to allow quicker recovery of debt.

Agency: Social Security Administration
Status: Open
Priority recommendation

Comments: SSA agreed with this recommendation and in 2017 estimated that this change would result in an additional $213 million in collections over a 5-year period. The fiscal year 2021 President's budget submission contained a legislative proposal to make this change, and budgets since 2017 have contained similar proposals. As of June 2020, SSA reported that it plans to continue to submit similar legislative proposals. SSA also included the proposal in its regulatory agenda, noting that the change can also be implemented via regulatory change. We will close this recommendation once SSA achieves resolution from Congress on its legislative proposal or from its own regulatory efforts.

Recommendation: To ensure effective and appropriate recovery of DI overpayments and administration of penalties and sanctions, the Acting Commissioner of the Social Security Administration should consider adjusting monthly withholding amounts according to cost of living adjustments or charging interest on debts being collected by withholding benefits. Should SSA determine that it is necessary to do so, it could pursue legislative authority to use recovery tools that it is currently unable to use.

Agency: Social Security Administration
Status: Open

Comments: Although SSA initially disagreed with this recommendation, the agency reassessed its response in June 2019 and decided to take additional actions. As of June 2020, SSA is developing a system to track debts (the Debt Management Product) which will have the ability to store, track, and apply interest and penalties to overpayment debts. SSA also reports that it is seeking a regulatory change to clarify procedures to charge interest on debts. While SSA is pursuing these measures to position itself to charge interest on debts, the agency has not yet decided whether it will ultimately do so. We will close this recommendation once SSA makes a decision on how to proceed with charging interest on overpayment debts.

Recommendation: To improve compliance with OMB Circular A-129 standards and strengthen management and oversight of the guarantee program, and to enhance screening of loan guarantee applicants, the Secretary of Agriculture should direct the Undersecretary for Rural Development to complete steps to obtain access to Treasury's Do Not Pay portal and establish policies and procedures to deny loan guarantees to applicants who are subject to administrative offsets for delinquent child support payments.

Agency: Department of Agriculture
Status: Open

Comments: In August 2020, Rural Development said that implementing the recommendation would require a rule change and that it anticipated publishing a proposed rule by December 31, 2020.

Recommendation: To improve compliance with OMB Circular A-129 standards and strengthen management and oversight of the guarantee program, and to strengthen oversight of lenders and servicers, the Secretary of Agriculture should direct the Undersecretary for Rural Development to develop and publish in the Federal Register qualification requirements for the principal officers of lenders and servicers seeking initial or continued approval to participate in the guarantee program.

Agency: Department of Agriculture
Status: Open

Comments: In August 2020, Rural Development said it anticipated publishing a proposed rule to implement this recommendation by December 31, 2020.

Recommendation: To improve compliance with OMB Circular A-129 standards and strengthen management and oversight of the guarantee program, and to strengthen oversight of lenders and servicers, the Secretary of Agriculture should direct the Undersecretary for Rural Development to develop and publish in the Federal Register capital and financial requirements for guarantee program lenders that are not regulated by a federal financial institution regulatory agency.

Agency: Department of Agriculture
Status: Open

Comments: In August 2020, Rural Development said it anticipated publishing a proposed rule to implement this recommendation by December 31, 2020.

Recommendation: To improve compliance with OMB Circular A-129 standards and strengthen management and oversight of the guarantee program, and to strengthen risk assessment and reporting, the Secretary of Agriculture should direct the Undersecretary for Rural Development to improve performance measures comparing RHS and the Federal Housing Administration loan performance, potentially by making comparisons on a cohort basis and limiting comparisons to loans made in similar geographic areas.

Agency: Department of Agriculture
Status: Open

Comments: In August 2020, Rural Development said it was working with a contractor to establish more meaningful performance measures and estimated a completion date of December 31, 2020.

Recommendation: To improve compliance with OMB Circular A-129 standards and strengthen management and oversight of the guarantee program, and to strengthen risk assessment and reporting, the Secretary of Agriculture should direct the Undersecretary for Rural Development to develop risk thresholds for the guarantee program, potentially in the form of maximum portfolio- or loan-level loss tolerances.

Agency: Department of Agriculture
Status: Open

Comments: Rural Development hired a contractor to help establish risk thresholds for the guarantee program. The contractor's October 2016 report developed and recommended portfolio-level and loan-level risk thresholds (values that trigger consideration of policy adjustments) and also recommended that program officials conduct stress tests to validate that each recommended risk threshold was appropriate for the program's overall risk appetite. As of August 2020, Rural Development said it was continuing to work with the contractor to stress test the risk thresholds and estimated a completion date of December 31, 2020.

Recommendation: To improve compliance with OMB Circular A-129 standards and strengthen management and oversight of the guarantee program, and to more effectively fulfill the requirements for conducting program reviews described in OMB Circular A-129, the Secretary of Agriculture should direct the Undersecretary for Rural Development to develop procedures for selecting RD credit programs for review based on risk and establish a prioritized schedule for conducting the reviews.

Agency: Department of Agriculture
Status: Open

Comments: In August 2020, Rural Development said that its Chief Risk Officer was working with the agency on establishing procedures for selecting Rural Development credit programs for review based on risk, including a prioritized schedule. Rural Development estimated a completion date of June 30, 2021.

Recommendation: To strengthen USDA's ability to better manage and monitor the progress of the Blueprint, including efforts to streamline and improve administrative services, the Secretary of Agriculture should direct the Assistant Secretary for Administration to develop a complete list identifying all of the Blueprint efforts under way and document key information needed to monitor their progress, such as status of implementation, time frames for completion, and related performance measures.

Agency: Department of Agriculture
Status: Open

Comments: As of June 2020, GAO is working with the agency to determine what actions the agency has taken related to this recommendation.

Recommendation: To strengthen USDA's ability to better manage and monitor the progress of the Blueprint, including efforts to streamline and improve administrative services, the Secretary of Agriculture should direct the Assistant Secretary for Administration to reexamine the adequacy of the staff and budget resources committed to the day-to-day management of the Blueprint, and further leverage existing departmental resources as needed.

Agency: Department of Agriculture
Status: Open

Comments: As of June 2020, GAO is working with the agency to determine what actions the agency has taken related to this recommendation.

Recommendation: To improve USDA's efforts to identify and track the benefits of the Blueprint, the Secretary of Agriculture should direct the Assistant Secretary for Administration to document the methodologies used to calculate any savings claimed for the Blueprint effort to ensure any such estimate is based on quality information.

Agency: Department of Agriculture
Status: Open

Comments: As of June 2020, GAO is working with the agency to determine what actions the agency has taken related to this recommendation.

Recommendation: To improve USDA's efforts to identify and track the benefits of the Blueprint, the Secretary of Agriculture should direct the Chief Financial Officer to develop a cost-effective method, using existing data systems, to collect and track USDA's spending on administrative services to identify baseline spending and target areas for future cost savings.

Agency: Department of Agriculture
Status: Open

Comments: As of June 2020, GAO is working with the agency to determine what actions the agency has taken related to this recommendation.

Recommendation: To improve USDA's efforts to identify and track the benefits of the Blueprint, the Secretary of Agriculture should direct the Assistant Secretary for Administration to systematically identify and track nonfinancial benefits from USDA's Blueprint efforts to better gauge the Blueprint's progress and more fully report its results.

Agency: Department of Agriculture
Status: Open

Comments: As of June 2020, GAO is working with the agency to determine what actions the agency has taken related to this recommendation.

Recommendation: To enhance USDA's efforts to share lessons learned from the Blueprint, the Secretary of Agriculture should direct the Assistant Secretary for Administration to maintain and promote existing web-based collaboration tools, including keeping information in these tools current, for agencies and staff offices to report their experiences and lessons learned from their Blueprint efforts to help strengthen internal information sharing and inform future efforts.

Agency: Department of Agriculture
Status: Open

Comments: As of June 2020, GAO is working with the agency to determine what actions the agency has taken related to this recommendation.

Recommendation: The Secretary of the Department of Health and Human Services should direct the Office of Refugee Resettlement to develop a process to ensure all information collected through its existing post-release efforts are reliable and systematically collected so that they can be compiled in summary form and provide useful information to other entities internally and externally.

Agency: Department of Health and Human Services
Status: Open

Comments: In March of 2016, the Office of Refugee Resettlement (ORR) created a new section in its unaccompanied children's policy guide that require ORR staff to make safety and well-being (SWB) follow-up calls to children and their sponsors after the child is release from ORR custody. In addition, in October of 2016, ORR added another section to its policy guide that included case reporting, records management, retention, and information sharing requirements for post-release service (PRS) providers. According to ORR officials, ORR collects and analyzes data from both its SWB calls and PRS providers. SWB call data include efforts made to contact both sponsor and child; participation rates; confirmation the child is currently residing with the sponsor; referrals made to the ORR National Call Center (NCC) for additional resources; any concerns regarding the child's safety and well-being; and whether any reports were made to the ORR Federal Field Specialist, child protective services, local law enforcement, and/or the ORR Sexual Abuse Hotline. PRS data include the reason for referral; level of services provided; services areas accessed by the child and/or sponsor; outcomes; any concerns regarding the child's safety and well-being; and when services were discontinued, according to ORR officials. According to ORR officials, because ORR is currently in the process of developing a new case management system, the majority of information from SWB calls and post-release efforts is collected manually, outside of ORR's current case management system. Information collected through ORR's SWB calls is aggregated quarterly and a fact sheet containing aggregate data is distributed internally to ORR leadership. ORR officials say the new case management system will include information on SWB calls and post-release efforts. ORR tentatively plans for the first phase of the system to be operational by November 2020 and to deploy a finished product with all planned enhancements in late 2021. GAO will close this recommendation once ORR completes this system and demonstrates that it can be used for the purpose of collecting reliable safety and well-being and post-release services data and disseminating it internally and externally, as appropriate.

Recommendation: To help ensure that FDA has relevant and timely information to support management decisions, including the critical information necessary to ensure the safety and effectiveness of drugs compounded for animals, the Secretary of Health and Human Services should direct the Commissioner of the FDA to develop policy or guidance for agency staff that specifies circumstances under which FDA will or will not enforce compounding regulations for animals and clearly define key terms.

Agency: Department of Health and Human Services
Status: Open

Comments: In November 2019, FDA released for public comment its new Draft Guidance for Industry #256 - Compounding Animal Drugs from Bulk Drug Substances. The draft guidance describes FDA's policy regarding the compounding of animal drugs from bulk drug substances including the conditions under which FDA does not intend to take enforcement action for violations of the Federal Food, Drug, and Cosmetic Act's requirements for approval, adequate directions for use, and current Good Manufacturing Practices. We will review the updated guidance when it is finalized and determine if it addresses this recommendation. In August 2020, FDA indicated that, in response to numerous requests from external stakeholders, the comment period on the draft guidance has been extended to October 2020. Once the comments have been reviewed, FDA anticipates finalizing the guidance by the end of calendar year 2021.

Recommendation: To help ensure that FDA has relevant and timely information to support management decisions, including the critical information necessary to ensure the safety and effectiveness of drugs compounded for animals, the Secretary of Health and Human Services should direct the Commissioner of the FDA to consistently document the bases for FDA's decisions about how or whether it followed up on warning letters, adverse event reports, and complaints about drug compounding for animals.

Agency: Department of Health and Human Services
Status: Open

Comments: In July 2019, FDA reported to GAO that when the Draft Guidance for Industry #256 was issued that calendar year, FDA intended to develop a risk-based compliance program to address compounding of animal drugs from bulk drug substances. As part of that compliance program, FDA reported that it intended to consistently document the basis for its decisions about what actions are taken, for example, warning letters, adverse event reports, and complaints. In August 2020, FDA reported that a working group has been formed to develop a risk-based compliance strategy, which will include a process for documenting the basis for FDA's decisions about how or whether it followed up on warning letters, adverse event reports, and complaints about drug compounding for animals. FDA anticipates implementing this strategy simultaneously with the finalization of Guidance for Industry #256, which is anticipated to occur at the end of calendar year 2021. We will follow-up with FDA regarding these actions and determine if the actions address our recommendation.

Recommendation: Congress should consider the options for sustaining the Oil Spill Liability Trust Fund as well as the optimal level of funding to be maintained in the Fund, in light of the expiration of the Fund's per-barrel tax funding source in 2017.

Agency: Congress
Status: Open

Comments: In fiscal year 2019, the 116th Congress' House and Senate introduced bills H.R. 3301 and S. 865, respectively, to extend the per barrel tax expiration dates. In addition, the Senate bill proposes a ceiling to cut off the tax if the fund's balance is above a certain amount and to also restart based on meeting certain thresholds. We will continue to monitor legislation and congressional actions.

Recommendation: To help ensure the IRS collection program meets its mission and selects cases fairly, the Commissioner of Internal Revenue should establish, document, and implement objectives for the collection program and ACS, and define the key term of "fairness" as it applies to collection activities, which can be communicated to IRS staff.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In January 2017, IRS supplied documentation on how it had established a fairness policy statement, which is incorporated into the Internal Revenue Manual, communicated to staff in email, and provided via a powerpoint presentation to staff. IRS also established and documented collection program objectives as part of its FY2017 Collection Program Letter. In October 2017, IRS shared additional draft documentation with GAO that would align SB/SE objectives with objectives from its FY2017 Collection Program Letter as well as other information such as performance measures. Following our assessment and request for more information, in November 2017, IRS provided a document intended to define certain collection program objectives, but it did not clearly define fairness or collection program and ACS objectives. We provided IRS feedback on the document in November 2017, January 2018, and July 2018. In June 2019, IRS officials provided information on an ongoing IRS initiative to identify objectives for various programs, but the collection program with its automated case processes was not among the pilot programs. As a result, any actions to implement the recommendation will be stalled until the initiative's pilot programs are complete. As of December 2019, IRS had not provided a planned date when it expects to complete them. We will update the status of IRS's plans and actions to implement the recommendation after we complete review of any documents IRS provides, as we requested in December 2019.

Recommendation: To help ensure the IRS collection program meets its mission and selects cases fairly, the Commissioner of Internal Revenue should establish, document, and implement clear objectives for the collection program and enterprise-wide case categorization and routing processes, and define key terms, such as "fairness" and "risk."

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation. In March 2017, IRS provided documentation of actions taken on the recommendation, but the documents did not clearly define and communicate program objectives sufficient for internal control to support the collection program mission, including fairness in case selection. In November 2017, IRS provided additional documentation but it did not address case selection fairness or other objectives for the collection program and enterprise-wide case categorization and routing processes. In June 2019, IRS officials provided information on an ongoing IRS initiative to identify objectives for various programs, but the collection program with its case processes was not among the pilot programs. As a result, any actions to implement the recommendation will be stalled until the initiative's pilot programs are complete. As of November 2019, IRS had not provided a planned date when it expects to complete them. We will update the status of IRS's plans and actions to implement the recommendation after we complete review of any documents IRS provides, as we requested in December 2019.

Recommendation: To help ensure the IRS collection program meets its mission and selects cases fairly, the Commissioner of Internal Revenue should build upon existing Enterprise Risk Management (ERM) guidance to help managers identify internal and external risks to collection program objectives, and better understand how long-standing risk processes integrate with new ERM approaches; incorporate this guidance into existing or future ERM or collection program risk assessment processes.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS agreed with the recommendation. In November 2016, IRS provided documentation of risk management training for managers intended to assist them in understanding their responsibilities for identifying internal and external risks to collection program objectives. However, since objectives for the collection program and fairness were not yet clearly defined, such guidance could not be effectively incorporated into risk assessment processes. In March 2017, IRS provided documentation of further actions taken, but the documents did not clearly define and communicate program objectives sufficient for internal control, including risk assessment. In November 2017, IRS provided additional documentation but it did not address case selection fairness or other objectives for the collection program. In June 2019, IRS officials provided information on an ongoing IRS initiative to identify objectives for various programs, but the collection program was not among the pilot programs. As a result, any actions to implement the recommendation will be stalled until the initiative's pilot programs are complete. As of November 2019, IRS had not provided a planned date when it expects to complete them. We will update the status of IRS's plans and actions to implement the recommendation after we complete review of any documents IRS provides, as we requested in December 2019.

Recommendation: To strengthen BLM's controls and reasonably assure accountability over mining law program expenditures, both payroll and nonpayroll, the Secretary of the Interior should direct the Director of the Bureau of Land Management to establish procedures for regular and timely communication to all BLM employees on policy and procedural changes affecting the mining law program's expenditure-related processes.

Agency: Department of the Interior
Status: Open

Comments: The Department of Interior's (DOI) Bureau of Land Management (BLM) agreed with our recommendation. In support of closing this recommendation, officials from BLM re-iterated their policy about sending updates regarding guidance changes, which is included in its directives handbook. They also provided us with an example of its timely communication to BLM employees to announce the issuance of its revised Fund Code Handbook. We reviewed the directives handbook and verified that it contains guidance for communicating policy and procedural changes affecting the mining law program's expenditure-related processes. While the guidance in the directives handbook is a good start towards meeting the intent of our recommendation, we communicated to BLM in fiscal year 2019 that the findings in the report were caused in part by inadequate communication processes and the accessibility of the guidance to staff. To address the recommendation, we would like to see evidence that BLM has established procedures to ensure proper communication of changes or policies to the staff using BLM guidance, which includes having written procedures on how BLM publishes updates or communicates policy information, where guidance should be published in BLM's internal page, and the BLM officials who are in charge of that process. In fiscal year 2020, we have sent additional follow-up questions to the agency and are currently waiting for a response. We will continue to monitor the agency's actions to address this recommendation.

Recommendation: To increase the efficiency and improve the accuracy of the interagency UAC referral and placement process, the Secretaries of Homeland Security and Health and Human Services should jointly develop and implement a documented interagency process with clearly defined roles and responsibilities, as well as procedures to disseminate placement decisions, for all agencies involved in the referral and placement of UAC in HHS shelters.

Agency: Department of Homeland Security
Status: Open
Priority recommendation

Comments: Since our 2015 report, DHS and HHS developed two documents to guide interagency procedures related to the processing of UAC. Specifically, in April 2018, HHS and DHS established a memorandum of agreement regarding information sharing for UAC. Subsequently, on July 31, 2018, DHS and HHS issued a Joint Concept of Operations to memorialize interagency policies, procedures, and guidelines related to the processing of UAC. However, in February 2020, we reported that DHS and HHS officials' indicated that, in practice, the agencies have not resolved long-standing differences in opinion about whether and how agencies are to share information, and what type of information is needed to inform decisions about the care and placement of UAC. In commenting on our draft report, DHS stated that its components are working with HHS to document current information sharing practices, to validate remaining information sharing gaps, and to draft a joint plan between DHS and HHS to ensure that HHS receives information needed to make decisions for UAC. In their comments, HHS officials stated that they intend to reach out to counterparts at DHS in June 2020 to discuss potential periodic updates to the Joint Concept of Operations. In August 2020, DHS informed us that the department is working with HHS to document current information sharing practices, validate gaps, and draft a joint plan between DHS and HHS, among other actions. DHS estimates that it will complete these actions by March 31, 2021. To fully address the recommendation, DHS and HHS should ensure that they have implemented procedures aimed at improving the efficiency and accuracy of the interagency UAC referral and placement process.

Recommendation: To increase the efficiency and improve the accuracy of the interagency UAC referral and placement process, the Secretaries of Homeland Security and Health and Human Services should jointly develop and implement a documented interagency process with clearly defined roles and responsibilities, as well as procedures to disseminate placement decisions, for all agencies involved in the referral and placement of UAC in HHS shelters.

Agency: Department of Health and Human Services
Status: Open
Priority recommendation

Comments: Since our 2015 report, DHS and HHS developed two documents to guide interagency procedures related to the processing of UAC. Specifically, in April 2018, HHS and DHS established a memorandum of agreement regarding information sharing for UAC. Subsequently, on July 31, 2018, DHS and HHS issued a Joint Concept of Operations to memorialize interagency policies, procedures, and guidelines related to the processing of UAC. However, in February 2020, we reported that DHS and HHS officials' indicated that, in practice, the agencies have not resolved long-standing differences in opinion about whether and how agencies are to share information, and what type of information is needed to inform decisions about the care and placement of UAC. In commenting on our draft report, DHS stated that its components are working with HHS to document current information sharing practices, to validate remaining information sharing gaps, and to draft a joint plan between DHS and HHS to ensure that HHS receives information needed to make decisions for UAC. In their comments, HHS officials stated that they intend to reach out to counterparts at DHS in June 2020 to discuss potential periodic updates to the Joint Concept of Operations. In August 2020, DHS informed us that the department is working with HHS to document current information sharing practices, validate gaps, and draft a joint plan between DHS and HHS, among other actions. DHS estimates that it will complete these actions by March 31, 2021. To fully address the recommendation, DHS and HHS should ensure that they have implemented procedures aimed at improving the efficiency and accuracy of the interagency UAC referral and placement process.

Recommendation: To help improve CMS's process for establishing relative values for Medicare physicians' services, the Administrator of CMS should better document the process for establishing relative values for Medicare physicians' services, including the methods used to review RUC recommendations and the rationale for final relative value decisions.

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: To help improve the Centers for Medicare & Medicaid Service's (CMS) process for establishing relative values for Medicare physicians' services, in May 2015 we recommended that the Administrator of CMS better document the process, including the methods used to review recommendations from the American Medical Association/Specialty Society Relative Value Scale Update Committee (RUC) and the rationale for final relative value decisions. CMS concurred with this recommendation, stating that CMS establishes relative values for new, revised, and potentially misvalued physicians' services based on its review of a variety of sources of information, including the RUC. At that time, CMS officials told us the agency was working to improve the transparency of its process by proposing and finalizing changes to the process in the annual rule for the Physician Fee Schedule. Officials estimated that this process would take several years to complete. In order to close this recommendation as implemented, CMS will need to demonstrate that it has improved its internal and external documentation of its process for establishing relative values. As of June 2020, GAO was still waiting on confirmation from CMS that it had completed its enhancement process for establishing relative values for Medicare physicians' services in a way that would allow for greater transparency and documentation. CMS will need to demonstrate that it has improved its internal and external documentation for establishing relative values in order for GAO to close the recommendation. CMS officials agreed the recommendation should remain open as progress continues.

Recommendation: To help improve CMS's process for establishing relative values for Medicare physicians' services, the Administrator of CMS should develop a process for informing the public of potentially misvalued services identified by the RUC, as CMS already does for potentially misvalued services identified by CMS or other stakeholders.

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: To help improve the Centers for Medicare & Medicaid Service's (CMS) process for establishing relative values for Medicare physicians' services, in May 2015 we recommended that the Administrator of CMS develop a process for informing the public of potentially misvalued services identified by the American Medical Association/Specialty Society Relative Value Scale Update Committee (RUC), as CMS already does for potentially misvalued services identified by CMS or other stakeholders. CMS did not concur with this recommendation, asserting that the RUC is completely independent of CMS, and as such CMS has no authority to set the RUC's agenda for which services are reviewed. As of June 2020, CMS had not changed its position on the recommendation. We continue to believe that CMS needs to inform the public of potentially misvalued services identified by the RUC, as it does for potentially misvalued services identified by other stakeholders. We acknowledge that in 2017 CMS changed its process for establishing relative values by including proposed values for almost all services in the annual proposed rulemaking for the Physician Fee Schedule, which means that the changes in values for potentially misvalued services identified by the RUC are open for public comment before they become effective. However, we continue to believe CMS should inform stakeholders of these potentially misvalued services before CMS receives RUC recommendations for them and subsequently publishes the values in the proposed rule. Doing so would give stakeholders the same amount of time they have to provide input on potentially misvalued services identified by other stakeholders.

Recommendation: To help improve CMS's process for establishing relative values for Medicare physicians' services, the Administrator of CMS should incorporate data and expertise from physicians and other relevant stakeholders into the process as well as develop a timeline and plan for using the funds appropriated by the Protecting Access to Medicare Act of 2014.

Agency: Department of Health and Human Services: Centers for Medicare and Medicaid Services
Status: Open

Comments: To help improve the Centers for Medicare & Medicaid Service's (CMS) process for establishing relative values for Medicare physicians' services, in May 2015 we recommended that the Administrator of CMS incorporate data and expertise from physicians and other relevant stakeholders into the process, as well as develop a timeline and plan for using the funds appropriated by the Protecting Access to Medicare Act of 2014 (PAMA). CMS concurred with this recommendation, stating that stakeholders have the opportunity each year to nominate potentially misvalued services for review through a public nomination process. In August 2017, CMS officials reported that the final rulemaking for the 2017 Physician Fee Schedule included a data collection effort using PAMA funds and other authorities that will help furnish data to help in valuations for more than half of physician services. However, this effort pertains to global services, which are a specific type of service under the Physician Fee Schedule that include global, professional, and technical components, and does not apply to non-global services, which encompass almost half of physician services. Officials also reported that they had awarded a contract to explore data collection on practice expense and methodologies for using such data when valuing services in the Physician Fee Schedule. However, CMS did not indicate a specific timeline and plan for using the PAMA funds, just that the agency would continue to use these funds to explore more ways to gain improved data. In March 2018, CMS reported that it now incorporates data and expertise from relevant stakeholders-apart from the RUC-into its process for establishing relative values by including any new, revised, or potentially misvalued values in the annual proposed rulemaking, instead of establishing them on an interim final basis in the final rule. This means that the changes in values for services will be open for public comment prior to the implementation of changes to payment. We acknowledge that CMS has made progress towards meeting our recommendation by changing its process to allow for public comments on proposed changes to relative values before they go into effect. CMS has also made progress by beginning to use PAMA funds to assist with valuing global services and exploring avenues for collecting practice expense data. To close this recommendation, we need documentation that CMS has started to incorporate data more broadly into its process for establishing relative values and that it has a documented timeline and plan for how it will use the funds appropriated by the Protecting Access to Medicare Act of 2014. As of June 2020, we had not received this documentation.

Recommendation: To improve the military whistleblower reprisal investigation process and oversight of such investigations, the Secretary of Defense should work in coordination with the Department of Defense Inspector General (DODIG) to direct the services to follow standardized investigation stages and issue guidance clarifying how the stages are defined.

Agency: Department of Defense
Status: Open

Comments: DOD officials concurred with this recommendation and provided an update in May 2019, in which they stated that the office was preparing an issuance for coordination that will direct the services to follow standardized investigation stages and guidance clarifying how the stages are defined. DOD officials estimated that the issuance would be completed by December 31, 2019.

Recommendation: The FCC should conduct a program evaluation to determine the extent to which the Lifeline program is efficiently and effectively reaching its performance goals of ensuring the availability of voice service for low-income Americans while minimizing the contribution burden on consumers and businesses.

Agency: Federal Communications Commission
Status: Open

Comments: In a 2016 Lifeline modernization order, which FCC adopted March 31, 2016, FCC instructed the Universal Service Administrative Company (USAC) to hire an outside, independent third-party evaluator to complete a program evaluation of the modernized Lifeline program. FCC noted that the program evaluation would enable FCC and the public to have better information about the operation and effectiveness of the Lifeline program. Such an evaluation will likely address our recommendation. FCC's order stipulated that USAC must submit the evaluation's findings to FCC by December 2020. In July 2020, FCC officials told us the evaluation should be complete by October 2020. We will update the status of this recommendation after we receive additional information from FCC.

Recommendation: To address the limitations of existing distribution performance metrics, the Secretary of Defense should direct the Under Secretary of Defense for Acquisition, Technology and Logistics, in conjunction with TRANSCOM, to revise guidance to ensure that a customer wait time standard is established and used for the Marine Corps.

Agency: Department of Defense
Status: Open

Comments: DOD concurred with this recommendation. In September 2016, the Marine Corps established a Customer Wait Time (CWT) standard and developed CWT metrics that are in alignment with DOD policy. These changes were to be incorporated into Marine Corps policy through their normal Service procedures. As of August 2020, the Marine Corps has the CWT standard included in its new policy document, but the policy is going through internal coordination and is still in draft at this time. Current timeframe for publication is January 2021. Once we confirm the CWT standard is in the issued policy, we will close the recommendation.

Recommendation: To improve SBA's administration and oversight of the HUBZone program and reduce the risk that firms that no longer meet program eligibility criteria receive HUBZone contracts, the Administrator of SBA should establish a mechanism to better ensure that firms are notified of changes to HUBZone designations that may affect their participation in the program, such as ensuring that all certified firms and newly certified firms are signed up for the broadcast e-mail system or including more specific information in certification letters about how location in a redesignated area can affect their participation in the program

Agency: Small Business Administration
Status: Open

Comments: In response to this recommendation, SBA improved its notifications to newly certified firms but not to other certified firms. For example, SBA's certification letter to firms with principal offices in a redesignated area specifically states that the firm is in a redesignated area, explains the implications of the designation, and notes when the redesignated status will expire. However, we found in March 2016 that SBA had not yet implemented changes to better ensure that all currently certified firms would be notified of changes that could affect their program eligibility. It is important that all certified firms potentially affected by such changes receive information about the changes or are made aware in a timely fashion of any effects on their program eligibility. As of February 2017, SBA had begun to improve its notifications to all firms. According to SBA officials, the agency has started sending program notices to all the firms in its portfolio. They told us that for its most recent notice in February 2017, the agency copied all the e-mail addresses in its HUBZone database and placed them in the e-mail distribution system. In March 2018, SBA officials informed us that they obtain monthly lists of certified firms generated by an Oracle system process and that analysts compare the new list to the prior list and add any new firms to the list. In July 2019, SBA officials told us that they informed HUBZone firms of their responsibility to stay up to date on HUBZone geographical designations and program eligibility, through updated language in its HUBZone certification letters and two notices issued to HUBZone firms. While it is helpful that SBA now includes language in its certification letters notifying firms located in a redesignated area of the implications of that designation, SBA's current process does not inform firms when their status may change.

Recommendation: To improve SBA's administration and oversight of the HUBZone program and reduce the risk that firms that no longer meet program eligibility criteria receive HUBZone contracts, the Administrator of SBA should conduct an assessment of the recertification process and implement additional controls, such as developing criteria and guidance on using a risk-based approach to requesting and verifying firm information, allowing firms to initiate the recertification process, and ensuring that sufficient staff will be dedicated to the effort so that a significant backlog in recertifications does not recur.

Agency: Small Business Administration
Status: Open

Comments: In response to this recommendation, SBA officials told us that they began automating the process to notify firms that were due for recertification. According to the officials, since September 2015, notification e-mails have been sent daily (compared with the former cycle of two times a year). Each firm due for recertification within the next 30 days would receive the notice. SBA sends a second e-mail to firms that have not responded within 45 days of the first notification. According to SBA officials, as of February 2017, this change has not yet eliminated the backlog. SBA officials informed GAO in May 2017 that they have developed risk-based guidance for conducting recertification reviews and requesting supporting documentation. According to SBA, any certified HUBZone small business concern that has received $1 million or more in HUBZone contract dollars since its initial certification (or its most recent recertification) must submit the following: (a) a list of all current employees, identifying the name of the employee, the employee's address, the number of hours worked per month, and the location where the employee performs his/her work; and (b) payroll documentation. While SBA officials stated that they had completed a risk assessment of their HUBZone recertification process, SBA had not provided GAO with documentation on when SBA performed the risk assessment, which risks were identified and considered, or what analysis established the $1 million threshold as of August 2018. In July 2019, SBA provided a rationale for its risk-based approach to recertification, but the analysis for establishing the $1 million threshold remained unclear. SBA officials told us that the agency plans to conduct a risk assessment in accordance with GAO guidance for all government contracting and business development programs, including the HUBZone program. GAO continues to believe that such a risk assessment of the recertification process would help inform a risk-based approach to reviewing and verifying information from firms that appear to pose the most risk to the program.

Recommendation: To better ensure that FBI whistleblowers have access to recourse under DOJ's regulations should the individuals experience retaliation, and to minimize the possibility of discouraging future potential whistleblowers, the Attorney General should clarify in all current relevant DOJ guidance and communications, including FBI guidance and communications, to whom FBI employees may make protected disclosures and, further, explicitly state that employees will not have access to recourse if they experience retaliation for reporting alleged wrongdoing to someone not designated in DOJ's regulations.

Agency: Department of Justice
Status: Open
Priority recommendation

Comments: In response to our report, in December 2016, Congress passed and the President signed the FBI Whistleblower Protection Enhancement Act of 2016, Pub. L. No. 114-302, which, among other things, provides a means for FBI employees to obtain corrective action for retaliation for disclosures of wrongdoing made to supervisors and others in the employees' chain of command. Following this, the FBI worked closely with the Department of Justice's Office of Inspector General (DOJ-OIG) to develop a training that clearly identifies to whom FBI employees may make protected disclosures. In addition, the FBI issued an aligned policy directive and two fact sheets detailing whistleblower rights. In October 2018, a DOJ official reported to us that the department was in the process of updating its regulations and, in February 2020, DOJ officials confirmed that the updated regulation was in the departmental clearance process but they could not provide an estimate for when it would be finalized. As a result, as of February 2020, DOJ's regulations have not been updated and are inconsistent with the current statute and FBI's guidance and training; as such, the problem of unclear or conflicting guidance to FBI employees still needs to be addressed. To address this recommendation, DOJ would need to update its regulations and ensure that all relevant guidance is clear and consistent across the department.

Recommendation: To improve the reliability of its cost estimates, as NRC revises its cost estimating procedures, the NRC Chairman should ensure that the agency aligns the procedures with relevant cost estimating best practices identified in the GAO Cost Estimating and Assessment Guide and ensure that future cost estimates are prepared in accordance with relevant cost estimating best practices.

Agency: Nuclear Regulatory Commission
Status: Open
Priority recommendation

Comments: In August 2019, NRC staff reported that the Commission had directed them to revise the guidance and resubmit it to the Commission by January 2020. In February 2020, the NRC staff submitted the revised guidance to the Commission. NRC staff said that following Commission review and approval, they will publish the guidance. We will review the cost-benefit guidance when it is released and determine if it responds to this recommendation.

Recommendation: To help ensure that FSOC is comprehensively identifying and considering companies, the Secretary of the Treasury in consultation with FSOC members, should establish procedures to evaluate companies in Stage 2 and Stage 3 under both statutory determination standards when an evaluation in either stage concludes that a company does not meet one of the standards, or document--on a company-specific or more general basis--why the second determination standard is not relevant for determination evaluations.

Agency: Department of the Treasury: Financial Stability Oversight Council
Status: Open

Comments: In December 2019, FSOC adopted final interpretive guidance that revises its approach to evaluating and determining whether to designate nonbank financial companies. The final revised guidance prioritizes an activities-based approach to identifying and addressing potential risks to financial stability and states that FSOC will pursue company-specific determinations only if the activities-based approach is not sufficient. The guidance further states that if FSOC does consider a company-specific determination, its evaluation will focus primarily on the first determination standard. The guidance does not indicate the establishment of procedures to evaluate companies under both determination standards for the purpose of comprehensively identifying and considering companies or to document why the other standard is not relevant. We will continue to monitor FSOC's implementation of the guidance and any additional actions that may be responsive to our recommendation.

Recommendation: To help ensure that FSOC is comprehensively identifying and considering companies, the Secretary of the Treasury in consultation with FSOC members, should develop a process to collect information necessary for Stage 1 analysis, as appropriate, from certain nonbank financial companies for which public or regulatory information is otherwise unavailable. For example, FSOC could have companies for which such information is unavailable and that meet certain characteristics (such as quantitative thresholds similar to those used in Stage 1) report necessary information to the Office of Financial Research.

Agency: Department of the Treasury: Financial Stability Oversight Council
Status: Open

Comments: In December 2019, FSOC adopted final interpretive guidance that revises its approach to evaluating and determining whether to designate nonbank financial companies. The final revised guidance introduces a new stage 1 of the designation process in which FSOC would notify a nonbank financial company under review and consider available public and regulatory information. While the guidance states that a company under review in stage 1 may submit information it deems relevant to the evaluation, FSOC would not require the company to submit information during stage 1. We will continue to monitor FSOC's implementation of the revised guidance and any additional actions that may be responsive to our recommendation.

Recommendation: To clarify the desired results of the correspondence audit program and its linkages to IRS-wide activities, the Commissioner of the Internal Revenue Service should establish formal program objectives.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS correspondence audit program officials planned a working group to develop formal program objectives. In November 2016, IRS officials provided documents intended to define the program objectives, but the objectives were unclear. As of December 2019, IRS officials provided draft program objectives to GAO for discussion and are responding to comments from GAO. We will update the status when IRS provides any further supporting documentation, as we requested in March 2020.

Recommendation: To clarify the desired results of the correspondence audit program and its linkages to IRS-wide activities, the Commissioner of the Internal Revenue Service should ensure that the program measures reflect those objectives.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS officials said that, among other actions, they plan to review and update program documentation and guidance as warranted to ensure a clear link between correspondence audit program objectives and related measures. IRS officials provided documentation in November 2016, but program measures could not be clearly linked to objectives because the objectives were not clear. As of December 2019, IRS officials provided draft measures for their draft program objectives to GAO and are responding to comments from GAO. We will update the status when IRS provides any further supporting documentation, as we requested in March 2020.

Recommendation: To clarify the desired results of the correspondence audit program and its linkages to IRS-wide activities, the Commissioner of the Internal Revenue Service should clearly link those measures with strategic IRS-wide goals on ensuring compliance in a cost-effective way while minimizing taxpayer burden.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open
Priority recommendation

Comments: IRS officials said that, among other actions, they plan to review and update program documentation and guidance as warranted to ensure that program measures clearly link to IRS strategic goals. IRS officials provided documentation in November 2016,but measures for the program could not be clearly linked to either the program objectives or IRS goals because the objectives were not clear. As of December 2019, IRS officials provided GAO with draft linkages to IRS's strategic goals for the draft measures and program objectives and are responding to comments from GAO on those linkages. We will update the status when IRS provides any further supporting documentation, as we requested in March 2020.

Recommendation: To assist states that rely on or are planning to contract with an MCO to administer Medicaid prescription benefits, and to help provide effective oversight of psychotropic medications prescribed to children in foster care, the Secretary of Health and Human Services should issue guidance to state Medicaid, child-welfare, and mental-health officials regarding prescription-drug monitoring and oversight for children in foster care receiving psychotropic medications through MCOs.

Agency: Department of Health and Human Services
Status: Open

Comments: In an October 2018 written response, Health and Human Services (HHS) noted that they released 2017-2018 Drug Utilization Review Summaries for Prescription Drug Fee-For-Service Programs as it relates to national statistics on state oversight of psychotropic medications, as well as new state requirements to report on their Medicaid managed care organizations. However, as of August 2019, HHS confirmed they have not issued any guidance to state Medicaid, child-welfare, and mental-health officials regarding prescription-drug monitoring and oversight for children in foster care receiving psychotropic medications through MCOs, as we recommended. We continue to believe that additional HHS guidance that helps states implement oversight strategies within the context of a managed-care environment is needed to help ensure appropriate monitoring of psychotropic medications prescribed to children in foster care.

Recommendation: To ensure appropriate levels of employees' supervision and guidance for the workforces of USDA's service center agencies, consistent with OPM guidance, the Secretary of Agriculture, through the Chief Human Capital Officer, should revise departmental policy targeting a uniform supervisory ratio so that the service center agencies can identify appropriate supervisory ratios based on a documented analysis of their specific customer needs and workload distribution.

Agency: Department of Agriculture
Status: Open

Comments: As of May 2020, the Department of Agriculture has not taken action to implement this recommendation.

Recommendation: To proactively prepare for oversight of future disaster relief funding, the Director of OMB should develop standard guidance for federal agencies to use in designing internal control plans for disaster relief funding. Such guidance could leverage existing internal control review processes and should include, at a minimum, the following elements: (1) robust criteria for identifying and documenting incremental risks and mitigating controls related to the funding and (2) requirements for documenting the linkage between the incremental risks related to disaster funding and efforts to address known internal control risks.

Agency: Executive Office of the President: Office of Management and Budget
Status: Open
Priority recommendation

Comments: To address the recommendation, OMB should issue guidance on internal control for disaster relief funding, including criteria for identifying additional risks and mitigating controls related to the funding and a requirement to link these incremental risks to ongoing efforts to address known internal control risks. On July 15, 2016, OMB issued the revised Circular No. A-123, Management's Responsibility for Enterprise Risk Management and Internal Control. The Circular requires agencies to implement enterprise risk management, which includes the development of a risk profile that analyzes the risks faced in achieving strategic objectives and identifies options for addressing them. In April 2017, OMB staff stated that they believe that the implementation of enterprise risk management through Circular No. A-123 satisfies the intent our recommendation. Because the responsibility for implementing enterprise risk management lies with agency management, Circular No. A-123 does not include specific guidance for identifying risks related to disaster funding. Further discussion and documentation to support OMB's position that the revised Circular addresses our recommendation will be necessary. The Bipartisan Budget Act of 2018, Sec. 21208(c) requires OMB to issue standard guidance for Federal agencies to use in designing internal control plans for disaster relief funding in order to proactively prepare for oversight of future disaster relief funds. The Act states this guidance shall leverage existing internal control review processes and shall include, at a minimum, (1) robust criteria for identifying and documenting incremental risks and mitigating controls related to the funding, and (2) guidance for documenting the linkage between the incremental risks related to disaster funding and efforts to address known internal control risks. GAO reviewed OMB's actions to implement the law. On June 28, 2019, GAO, 2017 Disaster Relief Oversight: Strategy Needed to Ensure Agencies' Internal Control Plans Provide Sufficient Information, GAO-19-479 (Washington, D.C.: Jun 28, 2019) reported the 2013 recommendation remains open and that we plan to continue monitoring OMB's progress in implementing this priority recommendation. Further, the report stated that OMB did not have an effective strategy to ensure that agencies timely submitted internal control plans; and OMB's Memorandum M-18-14, Implementation of Internal Controls and Grant Expenditures for the Disaster-Related Appropriations lacked specific instructions to agencies on what to include in their internal control plans. As such, a new recommendation was warranted. As of February 2020, OMB has not provided any new status updates for this recommendation.

Recommendation: To help maintain a more thorough and insightful 2020 Census development schedule in order to better manage risks to a successful 2020 Census, the Secretary of Commerce and Undersecretary of Economic Affairs should direct the U.S. Census Bureau to improve the credibility of schedules, including conducting a quantitative risk assessment.

Agency: Department of Commerce
Status: Open
Priority recommendation

Comments: The Bureau agreed with this recommendation and stated that it had already begun maturing project schedules to ensure that the logical relationships between discrete schedules were put into place. Schedule integration sessions across projects and programs were held in late January 2014 and into February 2014 and periodically since then, where work was deconstructed into detailed schedules. The Bureau released its operational plan and other documentation in November 2015 and announced in June 2016 that it would finalize and release its 2020 Census schedule in July 2016. In 2015, the Bureau provided us with a preliminary output from its risk analysis software as a demonstration of the type of analysis it had committed to, but since then its officials have said that they will not be able to take all the steps needed to satisfy this recommendation for the 2020 Census. The Bureau took steps toward conducting quantitative schedule risk analyses with its master activity schedule for the 2020 Census, but effectively ran out of time to do so. Assigning resources to large complex schedules in order to conduct such analyses is easier to do early in schedule development process, as we recommended the Bureau do in 2009 for its 2020 Census schedule. This recommendation will remain open pending the Bureau taking steps to carry out quantitative risk assessments of its 2030 schedule with appropriate resources linked to it.

Recommendation: To enable the department to meet its Africa-related missions at the least cost, the Secretary of Defense should conduct a more comprehensive and well-documented analysis of options for the permanent placement of the headquarters for AFRICOM, including documentation as to whether the operational benefits of each option outweigh the costs. These options should include placing some AFRICOM headquarters personnel in forward locations, while moving others to the United States. In conducting this assessment, the Secretary should follow key principles GAO has derived for such studies, as well as principles found in DOD Instruction 7041.3, to help ensure that the results are comprehensive, well-documented, accurate, and credible. Should DOD determine that maintaining a location in Stuttgart is the best course of action, the Secretary of Defense should provide a detailed description of why the operational or other benefits outweigh the costs and benefits of relocating the command.

Agency: Department of Defense
Status: Open

Comments: DOD partially agreed with GAO's recommendation. In its comments on GAO's September 2013 report DOD noted that to meet the requirements of the Budget Control Act of 2011 it would consider a wide range of options, and if any of these options required additional analysis of the location of AFRICOM headquarters, DOD would conduct a more comprehensive and well-documented analysis. However, in June 2019, DOD officials stated that the department had not conducted any additional analysis on the permanent placement of AFRICOM headquarters. Furthermore, DOD officials stated that AFRICOM would remain in Stuttgart, Germany, for the foreseeable future and no additional analysis was being planned. As of January 2020, DOD had not provided additional information to indicate progress on this recommendation. GAO maintains that such an analysis is needed and until the costs and benefits of maintaining AFRICOM headquarters in Germany are specified and weighed against the costs and economic benefits of moving the command, the department may be missing an opportunity to accomplish its missions successfully at a significantly lower cost.

Recommendation: To help SEC address identified personnel management challenges, and to help enhance the credibility of its performance management system, the Chairman of SEC should direct the COO and OHR to conduct periodic validations (with staff input) of the performance management system and make changes, as appropriate, based on these validations.

Agency: United States Securities and Exchange Commission
Status: Open
Priority recommendation

Comments: SEC management and the union agreed in November 2018 to implement a new performance management system and a new incentive bonus program in 2020. According to SEC officials, SEC plans to work with OPM to validate the new performance management system by conducting focus groups with staff at the midpoint of the 2020 appraisal period and surveying staff on the new system at the conclusion of the 2020 appraisal period. These plans are consistent with our 2013 recommendation that SEC should conduct periodic validations of its performance management system. In August 2020, SEC reported that it began implementation of the new 2-tier performance management program and will complete the annual rating cycle in December 2020, with feedback and appraisal closeout activities occurring in early calendar year 2021. According to SEC, OPM will assess the new program after calendar year 2020 performance cycle activities are completed. We will continue to monitor SEC's progress in validating the new performance management system.

Recommendation: Congress should consider granting Labor the additional authority it is seeking to access wage data to help verify claimants' reported income and help ensure the proper payment of benefits.

Agency: Congress
Status: Open

Comments: No legislation introduced as of March 20120. The Workers' Compensation Reform Act of 2015 (S. 2051, title V) was introduced in the 114th Congress. It would have allowed DOL to access wage data, as GAO suggested in April 2013, from the National Directory of New Hires to improve the integrity of the Federal Employees' Compensation Act program, among other actions. If similar legislation were introduced in the 116th Congress and enacted, this legislation could help to prevent and detect improper payments in the Federal Employees' Compensation Act program.

Recommendation: As one of only a few major acquisition programs to award a fixed-price incentive (firm target) development contract in recent years, evaluating performance and identifying lessons learned will be very illustrative and important to inform decision-makers and help guide and improve future defense acquisition programs. Therefore, the Under Secretary of Defense for Acquisition, Technology and Logistics should closely monitor the cost, schedule, and performance outcomes of the KC-46 program to identify positive or negative lessons learned.

Agency: Department of Defense: Office of the Secretary of Defense: Office of the Under Secretary of Defense for Acquisition, Technology, and Logistics
Status: Open

Comments: DOD compiled lessons learned during the source selection phase of the KC-46 program. As of August 2020, the Department has identified lessons learned during program implementation to evaluate cost, schedule and performance outcomes as we recommended. Program officials provided a copy of the report, which is with SAF/AQ for approval, and will then be distributed across the department.

Recommendation: The Commissioner of Internal Revenue should direct the appropriate officials to define and implement a process, including defined criteria, for reselecting ongoing projects.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In March, 2017, IRS issued its Portfolio Investment Plan Process Description Manual for selecting and prioritizing new and ongoing operations support activities. The manual includes criteria for prioritizing selections; and provides for comparing assets against one another to create a prioritized portfolio; and ensuring executives' funding decisions are based upon the process for selecting and prioritizing activities. In March 2018, IRS updated the manual and also issued related detailed procedures. In May 2019, IRS stated that its Information Technology/Strategy and Planning group had developed a prioritization process and associated scoring criteria to help facilitate decision making for business systems modernization programs, projects, and capabilities. The agency noted that improvements were being made to the process and full implementation was anticipated for June 2019.In April 2020, IRS informed us that it had moved its target for fully implementing the recommendation to November 2020. We will continue to monitor IRS's efforts to implement the recommendation.

Recommendation: The Commissioner of the IRS should direct the appropriate IRS officials to revise the post orders for the service center campuses (SCC) and lockbox bank security guards to include specific procedures for timely reporting exterior lighting outages to SCC or lockbox bank facilities management. These procedures should specify (1) whom to contact to report lighting outages and (2) how to document and track lighting outages until resolved.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: IRS's actions to address this recommendation are ongoing. IRS officials stated that during fiscal year 2020, Facilities Management and Security Services (FMSS) will update the Internal Revenue Manual to reflect the necessary guidance for service center guards and FMSS physical security specialists to know (1) whom the guards are to contact to report lighting outages and (2) how lighting outages are to be documented and tracked until resolved.

Recommendation: To promote an efficient use of resources and to better plan for the design of a new performance management system, the Secretary of Defense should direct the Deputy Assistant Secretary of Defense for Civilian Personnel Policy to, in conjunction with the DOD Comptroller, help ensure that information identifying and supporting the costs of the NSPS termination and new performance management system is documented, reliable, traceable to a source document, and readily available for examination.

Agency: Department of Defense
Status: Open

Comments: GAO staff met with DOD officials in October 2019 to discuss the status of the department's new performance management system and any efforts to address this recommendation. DOD officials agreed to provide documentation related to these efforts, but, as of November 2019, this documentation. has not been received. Further updates will be made once that documentation is received and reviewed.

Recommendation: To ensure sufficient follow-up to DOD's corrosion study, the Secretary of Defense should direct the USD (AT&L) to document program-specific recommendations flowing from the corrosion study with regard to the other weapon systems identified--specifically, the Expeditionary Fighting Vehicle, CH-53K helicopter, Joint High Speed Vessel, Broad Area Maritime Surveillance Unmanned Aircraft System, and the Joint Light Tactical Vehicle--and establish a process for monitoring and assessing the effectiveness of the CPC programs for these systems.

Agency: Department of Defense
Status: Open

Comments: As of September 2015, DOD had not documented program-specific recommendations from the corrosion study for the other weapon systems identified in its report. However, DOD updated its Corrosion Prevention and Control Planning Guidebook in 2014 and, according to officials, is working to update DOD Instruction 5000.67, Prevention and Mitigation of Corrosion on DOD Military Equipment and Infrastructure. These actions may improve the corrosion prevention and control planning for the weapon systems identified in DOD's study. DOD partially concurred with this recommendation at the time of our report but as of March 2019, has since decided to take action to implement it. According to Corrosion Office officials, they interacted with two of five weapon-systems programs on corrosion-related matters. One of these weapon-system programs, per Corrosion Office officials, was eventually canceled. In addition to updating the Corrosion Prevention and Control Planning Guidebook for Military Systems and Equipment in 2014, officials stated that they are planning to further update DOD Instruction 5000.67 (Prevention and Mitigation of Corrosion on DOD Military Equipment and Infrastructure). Also, according to Corrosion Office officials, procedures for evaluating acquisition programs will be included in the new DOD manual on corrosion. The Corrosion Office's goal of completing this instruction update and creating the new manual is by the end of calendar year 2020. We will monitor the extent to which DOD implements this recommendation.

Recommendation: To ensure sufficient follow-up to DOD's corrosion study, the Secretary of Defense should direct the USD (AT&L) to document Air Force-and Navy-specific recommendations flowing from the corrosion study and establish a process for monitoring and assessing the effectiveness of these services' corrective actions.

Agency: Department of Defense
Status: Open

Comments: As of September 2015, DOD had not documented Air Force- and Navy-specific recommendations flowing from the corrosion study. However, DOD updated its Corrosion Prevention and Control Planning Guidebook in 2014 and, according to officials, is working to update DOD Instruction 5000.67, Prevention and Mitigation of Corrosion on DOD Military Equipment and Infrastructure. Further, the Air Force and the Navy have both taken actions to address the DOD-wide recommendations from the corrosion study. These actions may improve corrosion prevention and control planning for Air Force and Navy programs. As of March 2019, Corrosion Office officials stated that they are planning to further update DOD Instruction 5000.67 (Prevention and Mitigation of Corrosion on DOD Military Equipment and Infrastructure) or other appropriate guidance related to the process or procedures for monitoring and assessing the effectiveness of Corrosion Prevention Control planning for weapon systems, particularly related to how the military services will accomplish this within their increased weapon system oversight role. In addition, per Corrosion Office officials, this information will be addressed in the new DOD manual on corrosion. The Corrosion Office's goal to complete this instruction update and create the new manual by the end of calendar year 2020. We will monitor the extent to which DOD implements this recommendation.

Recommendation: To help ensure that CFTC and SEC are strategically positioned to implement the joint report's recommendations and address remaining harmonization opportunities, as CFTC and SEC continue to develop the charter for the Joint Advisory Committee, the Chairmen of CFTC and SEC should take steps to establish, with associated time frames, clearer goals for future harmonization efforts and requirements for reporting and evaluating progress toward these goals. Specifically, the agencies could benefit from formalizing a plan to assess implementation of the joint report's recommendations and harmonization opportunities that may not have been fully addressed by the joint report, such as differences in market structure and investor definitions. Such a plan could include goals for future harmonization efforts, such as time frames for implementing the recommendations; assessment of whether remaining differences in statutes and regulations result in inconsistent regulation of similar products and entities that could lead to opportunities for regulatory arbitrage; and periodic reports to Congress on their progress, including the implementation and impact of the recommendations.

Agency: Commodity Futures Trading Commission
Status: Open

Comments: In July 2018, the CFTC and SEC Chairmen signed an updated version of a Memorandum of Understanding (MOU) originally signed in 2008. The new MOU created an updated framework for information sharing to make it easier for the two agencies to share information. A CFTC official noted that the MOU underscored two agencies' commitment to addressing harmonization efforts. In addition, CFTC officials identified examples of harmonization areas where CFTC and SEC have made some additional progress. This recommendation remains open until CFTC identifies steps taken to create a plan for assessing progress on working with SEC on remaining harmonization opportunities.

Recommendation: To better ensure FDA's oversight of the safety of GRAS substances, the Commissioner of FDA should develop a strategy to minimize the potential for conflicts of interest in companies' GRAS determinations, including taking steps such as issuing guidance for companies on conflict of interest and requiring information in GRAS notices regarding expert panelists' independence.

Agency: Department of Health and Human Services: Food and Drug Administration
Status: Open

Comments: On November 16, 2017, FDA published a notification of availability for the draft guidance "Best Practices for Convening a GRAS Panel: Guidance for Industry," with a request for comments on the draft guidance by May 15, 2018. FDA indicated that the draft guidance represents FDA's current thinking on strategies to minimize the potential for conflicts of interest in companies' GRAS determinations, including assessing potential GRAS panel members for conflicts of interest. As of July 2020, FDA had not yet finalized the guidance, so we are leaving the recommendation open.

Recommendation: To improve compliance with shareholder basis rules, Congress may wish to require S corporations to calculate and report shareholder's stock and debt basis as completely as possible. S corporations would report the calculation on the Schedule K-1 and send it to shareholders as well as IRS. If Congress judges that stock purchase price information that is currently only available to shareholders should not be transmitted to the S corporation due to privacy concerns, an alternative is to require that S corporations report less complete basis calculations using information already available to the S corporation.

Agency: Congress
Status: Open

Comments: As of January 2020, Congress had not enacted legislation to require S corporations--a federal business type that provides certain tax benefits like passing income and losses to shareholders' individual returns-- to calculate and report shareholder's stock and debt basis as completely as possible and report the calculation to shareholders and IRS, as GAO suggested in December 2009.

Recommendation: To help DOD obtain reasonable assurance that all active and Reserve component servicemembers to whom the PDHRA requirement applies are provided the opportunity to have their health concerns identified, the Assistant Secretary of Defense for Health Affairs and the military services should take steps to ensure that PDHRA questionnaires are included in DOD's central repository for each of these servicemembers.

Agency: Department of Defense
Status: Open

Comments: In its comments to this report, the Department of Defense (DOD) concurred with this recommendation. On October 2009, DOD's Force Health Protection and Response Office sent a memo to each of the military service Surgeons General emphasizing the need for the post-deployment health reassessment (PDHRA) to be offered to all service members who are eligible to complete the assessment. In 2010, DOD's noted that the services would work with the Armed Forces Health Surveillance Center (AFHSC) repository to ensure PDHRAs are submitted correctly, without transmission errors. DOD's 2011 case records showed that the Air Force and Army had developed data verification processes to ensure that AFHSC received PDHRAs. Further, the Defense Medical Data Center (DMDC) had planed to create a file consisting of the date of deployment for deployed personnel, and that the file would be available to the services in order to match DMDC with data from each of the service-specific systems, in accordance to requirements. In September 2011, although DMDC and the services had agreed to match rosters of deployed service members, there were still inconsistencies in deployment dates. In March 2012, DOD was still verifying data inconsistencies which, until resolved, leads to inaccurate reporting based on errors in the deployment dates. As of September 2019, DOD has not provided information or documentation to address this recommendation.

Recommendation: To better ensure the notice phase is achieving desired results at the lowest costs, the Commissioner of Internal Revenue should provide IRS collection managers and executives accessible, reliable information on what the business rules are.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In August 2017, IRS provided documentation of plans to periodically share with appropriate staff business rules information, along with related results of periodic evaluations of the business rules for the four highest-volume collection notices. In February 2018, IRS officials said that conducting the evaluations will depend on resources being available from the multiple functions involved. As of December 2019, IRS had not provided GAO with documentation of time frames for regularly sharing business rules information. We will update the status when IRS provides supporting documentation on actions taken, as we requested in December 2019.

Recommendation: To better ensure the notice phase is achieving desired results at the lowest costs, the Commissioner of Internal Revenue should periodically and regularly evaluate the business rules in terms of efficiency and effectiveness or other results and ensure the results are available to managers so the data and methodologies can be used or considered in future evaluations.

Agency: Department of the Treasury: Internal Revenue Service
Status: Open

Comments: In August 2017, IRS provided documentation of plans to periodically evaluate the business rules for the four highest-volume collection notices and share evaluation results with appropriate staff. In February 2018, IRS officials said that conducting the evaluations will depend on resources being available from the multiple functions involved. As of December 2019, IRS had not provided GAO with documentation of any evaluation results or a date when IRS expects to complete the first such evaluation. Nor had IRS provided time frames for regularly conducting and sharing business rules evaluation results. We will update the status when IRS provides supporting documentation on actions taken, as we requested in December 2019.