Recommendation: The Chairman of FCC should develop specific, measurable goals and performance measures for its efforts to monitor the performance of new WEA capabilities, such as enhanced geo-targeting and expanded alert message length. (Recommendation 1)

Agency: Federal Communications Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the IPAWS program should document how it plans to address key actions needed to educate alerting authorities in their use of IPAWS and implement a mechanism that will allow FEMA to regularly and systematically obtain and analyze feedback on alerting authorities' educational needs. (Recommendation 2)

Agency: Department of Homeland Security: Directorate of Emergency Preparedness and Response: Federal Emergency Management Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Director of the IPAWS program should establish procedures to prioritize pending IPAWS applications and to follow up with applicants to address these applications. (Recommendation 3)

Agency: Department of Homeland Security: Directorate of Emergency Preparedness and Response: Federal Emergency Management Agency
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Commandant of the Coast Guard should ensure that the Deputy Commandant for Mission Support implements risk management processes that more fully align with the five key steps outlined in DHS's Critical Infrastructure Risk Management Framework to better guide agency shore infrastructure investment decisions. This should include (1) setting goals and objectives, (2) identifying critical infrastructure, (3) assessing and analyzing risks and costs, (4) implementing risk management activities, and (5) measuring the effectiveness of actions taken. (Recommendation 1)

Agency: Department of Homeland Security: United States Coast Guard
Status: Open

Comments: The Coast Guard concurred with the spirit of GAO's recommendation to formalize its shore infrastructure risk management processes. As noted in their formal comment, the Coast Guard was mandated by the DHS Under Secretary for Management to follow risk management guidance outlined in the DHS Resilience Framework in March 2018. The Coast Guard reported that progress towards implementing GAO's recommendation is expected to be concurrent with the development and implementation of the Component Resilience Plan in accordance with the DHS Resilience Framework. According to the Coast Guard, the DHS-mandated Component Resilience Plan assigns a mission criticality level and resilience factor to each shore facility based on a criticality assessment, inter-dependencies between mission essential assets and functions, and risk. It will then align its current resilience factor formulation to that defined through the process in the DHS Resilience Framework. Risks identified through the Framework will be managed through a strategic combination of risk acceptance, mitigation, engineering, and operational controls. The Coast Guard stated that it intends to complete these multiple efforts by the end of 2021. In a March 2020 update, the Coast Guard stated that its Office of Civil Engineering was developing the Work Plan, newly named the 2020 Civil Engineering Program Work Plan: Initiatives and Tactics and said it would include goals and objectives for identifying and addressing infrastructure resilience gaps and resource needs in alignment with the Coast Guard's Component Resilience Plan. The Coast Guard expected to publish this Civil Engineering Work Plan by July 31, 2020, after which it said it would begin implementing and measuring the effectiveness of the actions identified in the Work Plan. In June 2020, the Coast Guard reported that it now anticipates finalizing the Civil Engineering Work Plan by September 30, 2020.

Recommendation: FERC should provide standard language and procedures to its staff on how to record information collected during inspections, including how and where to record information about safety deficiencies, in order to facilitate analysis of safety deficiencies across FERC's portfolio of regulated dams. (Recommendation 1)

Agency: Federal Energy Regulatory Commission
Status: Open

Comments: In February 2020, GAO confirmed that FERC had developed new standard operating procedures related for tracking deficiencies and follow-up items arising from dam safety inspections and other dam safety reviews. In addition, FERC told GAO that they plan to update their tracking system beginning in fiscal year 2021, which will facilitate the complete recording and subsequent analysis of safety deficiencies from inspections across FERC's portfolio of regulated dams. GAO will continue to monitor FERC's efforts to implement this recommendation.

Recommendation: FERC should use information from its inspections to assess safety risks across its portfolio of regulated dams to identify and prioritize safety risks at a national level. (Recommendation 2)

Agency: Federal Energy Regulatory Commission
Status: Open

Comments: In January 2019, FERC told GAO that it had begun developing a screening-level risk-assessment program to assess safety risks across the inventory of regulated dams and to help guide safety decisions. In February 2020, GAO confirmed that FERC had completed this screening-level risk assessment, and conducted some preliminary analysis of the results. In addition, FERC told GAO that the results of the screening level risk analyses will be used to revise the potential timing, frequency, and technical disciplines represented on dam safety inspections; to confirm or revise the urgency of existing and potential new follow up dam safety actions; and to identify previously unrecognized dam safety concerns and issues; to identify new dam safety priorities. GAO will continue to monitor FERC's efforts to implement this program.

Recommendation: To strengthen efforts to mitigate earthquake risks to federal buildings, the Secretary of Defense and the Administrator of GSA should (1) Define what constitutes an exceptionally high risk building, identify such buildings, and develop plans to mitigate those risks, including prioritizing associated funding requests as needed; and (2) To the extent practicable, prioritize and implement comprehensive seismic safety measures which could include earthquake drills, seismic safety inspections, and non-structural retrofits to decrease risks and reduce damage in federally-owned and -leased buildings in earthquake hazard areas.

Agency: Department of Defense
Status: Open

Comments: DOD concurred with our recommendation. In June 2019, DOD reported that the U.S. Army Corps of Engineers had developed a sophisticated risk assessment tool which could potentially be used to both define and assess exceptionally high risk buildings in a cost-effective manner. DOD said that it was in the process of determining the suitability of the tool for use by its components, and potentially other federal government partners. According to DOD, further action to address this recommendation will depend on both a favorable determination of the tool's suitability and the availability of funding to conduct assessments and complete the mitigation actions identified by the assessments. We will continue to monitor DOD's efforts to address this recommendation.