Recommendation: The Assistant to the President for National Security Affairs, in coordination with relevant stakeholders from NSC and NEC, should ensure that the plan to implement the 5G national strategy fully addresses all elements of our six desirable characteristics of a national strategy.

Agency: Executive Office of the President: Office of the Assistant to the President for National Security Affairs
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Chairman of FCC should direct and coordinate with the Chief Executive Officer of USAC to comprehensively assess fraud risks to the E-rate program, including implementing their respective plans for developing periodic fraud risk assessments, examining the suitability of existing fraud controls, and compiling fraud risk profiles following the timelines described in this report. The assessments should be informed by the key fraud risks identified in this report from closed court cases, prior risk assessments, and OIG reports, among other sources. (Recommendation 1)

Agency: Federal Communications Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Chairman of FCC should ensure that FCC and USAC follow the leading practices in GAO's Fraud Risk Framework when designing and implementing data-analytics activities to prevent and detect fraud as part of their respective antifraud strategies for the E-rate program. (Recommendation 2)

Agency: Federal Communications Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Chairman of FCC should direct the Chief Executive Officer of USAC to clearly define and fully document the data fields in all relevant E-rate program computer systems to help improve FCC's ability to understand and use data to manage fraud risks. (Recommendation 3)

Agency: Federal Communications Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Chairman of FCC should develop, in coordination with NTIA and other relevant stakeholders, specific and measurable performance goals—with related strategies and measures—to manage spectrum demands associated with 5G deployment. (Recommendation 1)

Agency: Federal Communications Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Chairman of FCC should develop specific and measurable performance goals—with related strategies and measures—to determine the effects 5G deployment and any mitigating actions may have on the digital divide. (Recommendation 2)

Agency: Federal Communications Commission
Status: Open

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of Commerce should ensure that the agency's Chief Information Officer updates the telecommunications inventory to include all telecommunications assets and services in use at the agency, and updates Commerce's process for ongoing maintenance of the inventory to include the complete inventory. (Recommendation 1)

Agency: Department of Commerce: Office of the Secretary
Status: Open

Comments: Commerce concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Commerce should ensure that the agency's Chief Information Officer completes efforts to identify future telecommunications needs using a complete inventory of existing telecommunications services; conducts and documents a comprehensive strategic analysis at all bureaus to identify areas for optimization and sharing of telecommunications resources; evaluates the costs and benefits of implementing new telecommunications technology and alternative options at all bureaus; and fully aligns Commerce's telecommunications needs with its long-term IT plans and enterprise architecture. (Recommendation 2)

Agency: Department of Commerce: Office of the Secretary
Status: Open

Comments: Commerce concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Commerce should ensure that the agency's Chief Information Officer finalizes the responsibilities related to the information security management role during the telecommunications transition, and assigns the roles for providing legal expertise during the transition, as well as for managing human capital, telecommunications assets, and information security during the transition, to staff members; describes how changes and disruptions related to the transition will be communicated to end users at all bureaus and identifies the key local and regional agency transition officials responsible for disseminating information about the transition to employees and working with the vendor to facilitate transition activities in Commerce's transition communications plan; and establishes and implements configuration and change management processes for its transition. (Recommendation 3)

Agency: Department of Commerce: Office of the Secretary
Status: Open

Comments: Commerce concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Commerce should ensure that the agency's Chief Information Officer identifies all of the funding needed to support the telecommunications transition; justifies requests for resources related to transition program management staff; conducts an analysis to identify staff resources needed for the entire transition effort; and analyzes training needs for staff assisting with the transition. (Recommendation 4)

Agency: Department of Commerce: Office of the Secretary
Status: Open

Comments: Commerce concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Commerce should ensure that the agency's Chief Information Officer takes into account the agency's telecommunications transition risks, mission critical systems, and contingency plans in Commerce's transition time line. (Recommendation 5)

Agency: Department of Commerce: Office of the Secretary
Status: Open

Comments: Commerce concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer develops a policy that requires the agency's components to maintain an inventory of the telecommunications assets and services that they acquire independently from headquarters; updates the telecommunications inventory to include all telecommunications assets and services in use at HHS, and updates the agency's process for ongoing maintenance of the inventory to include the complete inventory. (Recommendation 6)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer completes efforts to identify future telecommunications needs using a complete inventory of existing telecommunications services; and aligns HHS's telecommunications needs with its long-term IT plans. (Recommendation 7)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer identifies and documents telecommunications transition roles and responsibilities related to (1) managing assets and human capital during the planning and execution phases of the transition and (2) providing legal expertise during the execution phase of the transition, and assigns the transition information security management role to a staff member; and establishes and implements configuration and change management processes for HHS's transition. (Recommendation 8)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer identifies all of the funding needed to support the telecommunications transition at each of the agency's components, justifies requests for transition resources related to hardware and software upgrades, conducts an analysis to identify staff resources needed for the entire transition effort, and analyzes training needs for staff assisting with the transition. (Recommendation 9)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer completes efforts to identify telecommunications transition measures of success that can be used to assess transition progress; and takes into account all of the agency's components, as well as its mission critical systems, contingency plans,and telecommunications transition risks, in HHS's transition time line. (Recommendation 10)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of State should ensure that the agency's Chief Information Officer updates the telecommunications inventory to include all telecommunications assets and services in use at the agency, and updates State's process for ongoing maintenance of the inventory to include the complete inventory. (Recommendation 11)

Agency: Department of State: Office of the Secretary
Status: Open

Comments: State concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: he Secretary of State should ensure that the agency's Chief Information Officer completes efforts to identify the agency's future telecommunications needs using a complete inventory of existing telecommunications services; conducts and documents a strategic analysis to justify the sharing of telecommunications resources; and aligns State's telecommunications needs with its long-term IT plans and enterprise architecture. (Recommendation 12)

Agency: Department of State: Office of the Secretary
Status: Open

Comments: State concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of State should ensure that the agency's Chief Information Officer identifies telecommunications transition roles and responsibilities related to (1) managing assets during the planning and execution phases of the transition and (2) providing legal expertise during the execution phase of the transition, and finalizes the responsibilities related to the information security management role for the transition; includes in State's transition communications plan the frequency with which transition status updates and meetings will occur throughout the transition, a description of how changes and disruptions related to the transition will be communicated to end-users, and the key local and regional agency transition officials responsible for disseminating information about the transition to employees and working with the vendor to facilitate transition activities; and establishes configuration management processes for the agency's transition. (Recommendation 13)

Agency: Department of State: Office of the Secretary
Status: Open

Comments: State concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of State should ensure that the agency's Chief Information Officer identifies all of the funding needed to support the telecommunications transition, justifies requests for resources related to transition program management staff, conducts an analysis to identify staff resources needed for the entire transition effort, and finalizes its analysis of training needs for staff assisting with the transition. (Recommendation 14)

Agency: Department of State: Office of the Secretary
Status: Open

Comments: State concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of State should ensure that the agency's Chief Information Officer takes into account the agency's telecommunications transition risks, mission critical systems, and contingency plans in State's transition time line. (Recommendation 15)

Agency: Department of State: Office of the Secretary
Status: Open

Comments: State concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency's Chief Information Officer updates the telecommunications inventory to include all telecommunications assets and services in use at the agency, and updates and finalizes VA's process for ongoing maintenance of the inventory to include the complete inventory. (Recommendation 16)

Agency: Department of Veterans Affairs: Office of the Secretary
Status: Open

Comments: VA concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency's Chief Information Officer completes efforts to identify future telecommunications needs using a complete inventory of existing telecommunications services, and determines and documents that VA's telecommunications needs are aligned with its long-term IT plans. (Recommendation 17)

Agency: Department of Veterans Affairs: Office of the Secretary
Status: Open

Comments: VA concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency's Chief Information Officer includes in its telecommunications transition communications plan the key local and regional agency officials responsible for disseminating information about the transition to employees and working with the vendor to facilitate transition activities; and establishes and uses cost and schedule management processes in the agency's transition. (Recommendation 18)

Agency: Department of Veterans Affairs: Office of the Secretary
Status: Open

Comments: VA concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency's Chief Information Officer identifies and documents all of the funding needed to support the telecommunications transition, including costs for all years of transition planning support; justifies requests for transition resources related to program management staff; conducts an analysis to identify staff resources needed for the entire transition effort; and analyzes training needs for staff assisting with the transition. (Recommendation 19)

Agency: Department of Veterans Affairs: Office of the Secretary
Status: Open

Comments: VA concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Veterans Affairs should ensure that the agency's Chief Information Officer completes efforts to identify telecommunications transition measures of success that can be used to assess transition progress; and takes into account the agency's telecommunications transition risks, mission critical systems, and contingency plans in VA's transition time line. (Recommendation 20)

Agency: Department of Veterans Affairs: Office of the Secretary
Status: Open

Comments: VA concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Administrator of the National Aeronautics and Space Administration should ensure that the agency's Chief Information Officer updates the telecommunications inventory to include all telecommunications assets and services in use at the agency, and updates NASA's process for ongoing maintenance of the inventory to include the complete inventory. (Recommendation 21)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. We will continue to follow-up on the agency's efforts to address it.

Recommendation: The Administrator of the National Aeronautics and Space Administration should ensure that the agency's Chief Information Officer completes efforts to identify the agency's future telecommunications needs using a complete inventory of existing telecommunications services. (Recommendation 22)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. We will continue to follow-up on the agency's efforts to address it.

Recommendation: The Administrator of the National Aeronautics and Space Administration should ensure that the agency's Chief Information Officer identifies telecommunications transition roles and responsibilities related to (1) managing human capital during the planning and execution phases of the transition and (2) providing legal expertise during the execution phase of the transition. (Recommendation 23)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. We will continue to follow-up on the agency's efforts to address it.

Recommendation: The Administrator of the National Aeronautics and Space Administration should ensure that the agency's Chief Information Officer conducts an analysis to support the anticipated cost savings identified as part of the agency's justification for its resource requests related to hardware and software upgrades for the telecommunications transition, and justifies its resource requests for transition program management staff; conducts an analysis to identify staff resources needed for the entire transition effort; and analyzes training needs for staff assisting with the transition. (Recommendation 24)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. We will continue to follow-up on the agency's efforts to address it.

Recommendation: The Administrator of the National Aeronautics and Space Administration should ensure that the agency's Chief Information Officer takes into account the agency's mission critical systems and contingency plans in NASA's telecommunications transition time line. (Recommendation 25)

Agency: National Aeronautics and Space Administration
Status: Open

Comments: NASA concurred with this recommendation. We will continue to follow-up on the agency's efforts to address it.

Recommendation: The Secretary of Defense should ensure that the Under Secretary of Defense for Acquisition and Sustainment develop and implement a plan to guide and coordinate efforts to implement the Wideband AOA recommendations to support timely, informed decisions on its next wideband satellite communications architecture. (Recommendation 1)

Agency: Department of Defense: Office of the Secretary of Defense
Status: Open

Comments: DOD concurred with our recommendation, but as of July 2020 is still working to implement its corrective action plan.

Recommendation: The Secretary of Defense should ensure that the Director of the Defense Finance and Accounting Service provides customers with more complete information on the agency's rate-setting methodologies in rate documentation, briefings, and other forums where rates are discussed, including the costs included in rates, how those costs are calculated, and how changes in DFAS's workload affect customers' overall costs. (Recommendation 1)

Agency: Department of Defense: Defense Finance and Accounting Service
Status: Open

Comments: The Department of Defense (DOD) concurred with GAO's recommendation and stated that the Defense Finance and Accounting Service (DFAS) provides detailed cost and rate information to customers each year in multiple venues and would reach out to customers to obtain additional details to understand how to fill the information gap regarding rate transparency. In April 2020, DOD provided to GAO DFAS's corrective action plan, which stated that DFAS Client Executives would ask the Army, Navy, and Marine Corps lead Financial Managers for feedback on additional details needed to better plan for the DFAS bill. DFAS would then incorporate this additional detail into the customer bill briefings for the President's Budget Request for fiscal year 2022. DFAS also stated that the Air Force had indicated that DFAS provides appropriate transparency, but had requested that DFAS provide its bill estimate earlier, which DFAS had agreed to do.

Recommendation: The Secretary of Defense should ensure that the Director of the Defense Information Systems Agency provides customers with more complete information on the agency's rate-setting methodologies in rate documentation, briefings, and other forums where rates are discussed, including the costs included in rates, how those costs are calculated, and how changes in DISA's workload affect customers' overall costs. (Recommendation 2)

Agency: Department of Defense: Defense Information Systems Agency
Status: Open

Comments: The Department of Defense (DOD) concurred with GAO's recommendation and stated that the Defense Information Systems Agency (DISA) will make every effort to improve dialogue with customers to ensure the correct people have a full understanding of DISA's methodologies used to develop their rates. In April 2020, DOD provided to GAO DISA's corrective action plan, which stated that DISA would continue to make every effort to improve dialogue with customers to ensure an increased understanding of methodologies used to develop the rates. In this plan, DISA reported that, in February and March 2020, its Chief Financial Officer (CFO) coordinated with the communications and financial management senior leadership for the military services to discuss Defense Working Capital Fund (DWCF) rate methodology and transparency. In May 2020, DOD provided an updated status on this recommendation, stating that a result of the DISA CFO outreach was that DISA would use the regular and recurring DISA Drumbeat engagements with the military departments to present and maintain an open and transparent dialogue on DISA DWCF rates. GAO requested documentation for the recent Navy and Air Force Drumbeat meetings and the pending Army meeting, as well as recent rate briefings that document that DISA is providing this more complete rate-setting information to its customers. GAO will update the status of this recommendation once this documentation is received.

Recommendation: The Secretary of Defense should ensure that the Director of the Defense Logistics Agency provides customers with more complete information on the agency's rate-setting methodologies in rate documentation, briefings, and other forums where rates are discussed, including the costs included in its rates, how it calculates those costs, and how and when proposed changes to its rate-setting methodologies will affect customers' overall costs. (Recommendation 3)

Agency: Department of Defense: Defense Logistics Agency
Status: Open

Comments: The Department of Defense (DOD) concurred with GAO's recommendation and stated that the Defense Logistics Agency (DLA) would include more detailed information in its annual rate briefing to the Office of the Under Secretary of Defense (Comptroller) and the services regarding what is in its costs, how it calculates costs, and how and when changes would impact customers' overall costs. In addition, DLA stated that it conducts semiannual Cost Summits and periodic DLA/Service Days with customers. DLA said it would include discussions, as appropriate, of topics such as potential pricing methodology changes and estimated cost impacts to customers, well in advance of implementation. In March 2020, DLA notified GAO that it had discussed cost rates with the military services during the January 2020 DLA Cost Summit and the Service Days with each of the military services that it held in June and November 2019. GAO requested documentation for these five meetings that includes the more complete information on DLA's rate-setting methodologies that GAO identified in the recommendation. GAO will update the status of this recommendation once this documentation is received.

Recommendation: The Chairman of FCC should ensure that FCC's Office of Managing Director follows the leading practices in GAO's fraud risk framework related to a dedicated entity's management of its antifraud activities, such as serving as the repository of knowledge on fraud risks and coordinating antifraud initiatives. (Recommendation 1)

Agency: Federal Communications Commission
Status: Open

Comments: As of April 2020, FCC reported that the agency was undertaking further improvements of its fraud risk management program consistent with this recommendation. FCC did not indicate a completion date. We will continue to monitor FCC's progress related to establishing a dedicated antifraud management entity.

Recommendation: The Chairman of FCC should plan regular fraud-risk assessments tailored to the high-cost program and assess these risks to determine the program's fraud risk profile, as provided in GAO's fraud risk framework. (Recommendation 2)

Agency: Federal Communications Commission
Status: Open

Comments: As of April 2020, FCC reported that the agency was working with the Universal Service Administrative Company (USAC), which is the entity responsible for the day-to-day administration of the high-cost program, to implement this recommendation. FCC stated that USAC will conduct a fraud risk assessment of the high-cost program, but did not specify a time-frame for this effort. We will continue to review FCC and USAC's progress toward completing this assessment, and any steps taken to routinize this assessment.

Recommendation: The Chairman of FCC should design and implement an antifraud strategy for the high-cost program with specific control activities, based upon the results of fraud-risk assessments and a corresponding fraud risk profile, as provided in GAO's fraud risk framework. (Recommendation 3)

Agency: Federal Communications Commission
Status: Open

Comments: As of April 2020, FCC reported that the agency was working with the Universal Service Administrative Company (USAC), which is the entity responsible for the day-to-day administration of the high-cost program, to implement this recommendation. FCC reported it will ensure the results of the high-cost program's fraud risk assessment, along with other efforts to implement the GAO fraud risk framework, result in an overall fraud risk strategy. FCC did not indicate a completion date for these efforts, and we will continue to track FCC progress in this area.

Recommendation: The Chairman of FCC should assess the model-based support mechanism to determine the extent to which it produces reliable cost estimates. (Recommendation 4)

Agency: Federal Communications Commission
Status: Open

Comments: As of April 2020, FCC reported that it was considering ways to improve the model-based support mechanism for rate-of-return carriers participating in the high-cost program. FCC did not specify a time-frame for this effort. We will continue to review FCC's efforts related to this recommendation, including FCC efforts, if any, to verify the model's cost estimates.

Recommendation: The Chairman of FCC should consider whether to make use of the model-based support mechanism mandatory depending on the results of the assessment. (Recommendation 5)

Agency: Federal Communications Commission
Status: Open

Comments: As of April 2020, FCC reported that it was considering ways to improve the model-based support mechanism for rate-of-return carriers participating in the high-cost program. FCC indicated that any such improvements may help facilitate the transition of carriers from legacy support mechanisms to the model-based support mechanism. FCC did not provide a time-frame for completion of this effort. We will continue to monitor FCC's progress and efforts in regard to this recommendation.

Recommendation: Congress should consider legislation allowing public safety users continued use of the T-Band radio spectrum. (Matter for Consideration 1)

Agency: Congress
Status: Open

Comments: Awaiting Congressional action. When we confirm what action the Congress has taken in response to this recommendation, we will provide updated information.

Recommendation: Congress should consider developing comprehensive legislation on Internet privacy that would enhance consumer protections and provide flexibility to address a rapidly evolving Internet environment. Issues that should be considered include: (1) which agency or agencies should oversee Internet privacy; (2) what authorities an agency or agencies should have to oversee Internet privacy, including notice-and-comment rulemaking authority and first-time violation civil penalty authority; and (3) how to balance consumers' need for Internet privacy with industry's ability to provide services and innovate.

Agency: Congress
Status: Open

Comments: When we confirm what actions Congress has taken in response to this recommendation, we will provide updated information

Recommendation: The Secretary of Agriculture should direct the Administrator of RUS to undertake an assessment to identify any regulatory barriers that may unduly impede efforts by tribes to obtain RUS federal grant funds for broadband deployment on tribal lands and implement any steps necessary to address the identified barriers. (Recommendation 1)

Agency: Department of Agriculture
Status: Open

Comments: In April 2020, RUS officials told us that they were documenting their tribal outreach efforts and the feedback collected on tribal needs related to the RUS broadband programs, and that they would provide this information to us when it is complete. Once we receive and review this information, we will update the status of this recommendation.

Recommendation: The Chairman of the Federal Communications Commission should develop and implement methods--such as a targeted data collection--for collecting and reporting accurate and complete data on broadband access specific to tribal lands. (Recommendation 1)

Agency: Federal Communications Commission
Status: Open

Comments: FCC officials said they plan to implement by September 2021. They believe the rec is addressed by the new Digital Opportunity Data Collection (DODC) program and associated platform. FCC agreed that while the DODC is a general information improvement effort, it will also cover tribal lands and address this rec.

Recommendation: The Chairman of the Federal Communications Commission should develop a formal process to obtain tribal input on the accuracy of provider-submitted broadband data that includes outreach and technical assistance to help tribes participate in the process. (Recommendation 2)

Agency: Federal Communications Commission
Status: Open

Comments: FCC believes the Digital Opportunity Data Collection program will satisfy this recommendation in part by the data verification process, which has a crowd-sourced component. The data validation is not specific to tribal input, but FCC believes the process would help verify all data as accurate and thus satisfy our recommendation.

Recommendation: The Chairman of the Federal Communications Commission should obtain feedback from tribal stakeholders and providers on the effectiveness of FCC's 2012 statement to providers on how to fulfill their tribal engagement requirements to determine whether FCC needs to clarify the agency's tribal engagement statement. (Recommendation 3)

Agency: Federal Communications Commission
Status: Open

Comments: On October 24, 2018, FCC announced the appointment of 19 Tribal members and eight FCC members to the FCC's renewed Native Nations Communications Task Force. The Task Force, according to FCC's website, "will help the Commission fulfill its commitment to increase access to broadband and other communications infrastructure deployment and services on Tribal lands." According to FCC officials, FCC has tasked the Native Nations Communications Task Force with helping evaluate the effectiveness of the tribal engagement obligation, and expects the task force to provide FCC with its findings and recommendations by Spring 2020. FCC has yet to provide documentation to GAO to satisfy this recommendation.

Recommendation: The Administrator of FEMA should work with regional emergency communications coordination working group members to reach consensus on and implement an ongoing mechanism to encourage nationwide collaboration across these groups, considering the costs of one or more suitable methods, such as a national-level working group that uses virtual or other means of coordination, as appropriate. (Recommendation 1)

Agency: Department of Homeland Security: Directorate of Emergency Preparedness and Response: Federal Emergency Management Agency
Status: Open

Comments: DHS concurred with our recommendation. DHS created a national RECCWG website as part of the Homeland Security Information Network in fall 2019, and began a phased roll-out of 10 regional sub-pages available to all RECCWG members can post content and share information on exercises and training. In August 2020 FEMA officials confirmed the national site and all 10 regional sites were operational. They said that briefings on how to use the website for the regions are ongoing. We will continue to follow up on DHS's actions to implement the recommendation.

Recommendation: The Director of the Consumer Financial Protection Bureau should engage in collaborative discussions with other relevant financial regulators in a group that includes all relevant stakeholders and has defined agency roles and outcomes to address issues related to consumers' use of account aggregation services. (Recommendation 5)

Agency: Consumer Financial Protection Bureau
Status: Open

Comments: In a May 2018 letter, the Acting Director of the Bureau stated that the Bureau has previously issued principles that include reasonable and practical means for consumers to dispute and resolve instances of unauthorized payments conducted in connection with or as a result of authorized or unauthorized data sharing access. The letter notes that the Bureau is committed to monitoring developments in data aggregation markets and will continue to assess how the Bureau's consumer protection principles may be best realized, including engaging in discussions with other relevant federal and state financial regulators. In October 2018, Bureau staff advised us that they made a presentation on existing consumer protections that would appear to be applicable to consumers using data aggregators at the June 28, 2018 meeting of the Fintech Interagency Discussion Group, which includes OCC, the Federal Reserve, the Federal Deposit Insurance Corporation, and the National Credit Union Administration. They noted they are monitoring private sector efforts related to resolving data aggregation issues and that additional discussions among the regulators about these issues will be held in the future. We will recontact the agency in the future to obtain information on additional actions it has taken. In January 2020, GAO met with CFPB to discuss the recommendation and potential outcomes that could close the recommendation. CFPB officials stated that they will be hosting a public forum on data aggregation in February 2020. They noted that results from the public forum could include action related to the data aggregation recommendation.

Recommendation: The Chair of the Board of Governors of the Federal Reserve System should engage in collaborative discussions with other relevant financial regulators in a group that includes all relevant stakeholders and has defined agency roles and outcomes to address issues related to consumers' use of account aggregation services. (Recommendation 6)

Agency: Federal Reserve System: Board of Governors
Status: Open
Priority recommendation

Comments: In a May 2018 letter, the Chair of the Federal Reserve Board noted that the Federal Reserve recognizes the importance of working together to determine how best to encourage socially beneficial innovation in the marketplace, while ensuring that consumers' interests are protected. The letter noted that the Federal Reserve staff have been meeting with other regulators and industry participants. The Chair states that the Federal Reserve will continue to facilitate and engage in collaborative discussions with other relevant financial regulators in these and other settings to help market participants address the important issues surrounding reimbursement for consumers who use financial account aggregators and experience unauthorized transactions. In October 2018, Federal Reserve staff advised us that issues related to data aggregation were discussed at a June 28, 2018 meeting of the Fintech Interagency Discussion Group, which includes OCC, the Federal Reserve, the Federal Deposit Insurance Corporation, the National Credit Union Administration, and the Consumer Financial Protection Bureau. They noted that they are monitoring private sector efforts related to resolving data aggregation issues and expect to hold additional discussions among the regulators about these issues in the future. In March 2019, the agency noted that it continues to collaborate on this issue. As of February 2020, the agency had no further updates on this recommendation. We plan to follow up with Federal Reserve staff to obtain updates on these efforts in the future.

Recommendation: The Chairman of the Federal Deposit Insurance Corporation should engage in collaborative discussions with other relevant financial regulators in a group that includes all relevant stakeholders and has defined agency roles and outcomes to address issues related to consumers' use of account aggregation services. (Recommendation 7)

Agency: Federal Deposit Insurance Corporation
Status: Open
Priority recommendation

Comments: In November 2018, FDIC staff confirmed that they have engaged in collaborative discussions with other relevant financial regulators regarding issues related to consumers' use of account aggregation services and associated liability issues. We followed up in April 2019 and they confirmed that their collaboration had yet to produce outcomes that would satisfy the recommendation.

Recommendation: The Chairman of the National Credit Union Administration should engage in collaborative discussions with other relevant financial regulators in a group that includes all relevant stakeholders and has defined agency roles and outcomes to address issues related to consumers' use of account aggregation services. (Recommendation 8)

Agency: National Credit Union Administration
Status: Open

Comments: In July 2018, NCUA staff indicated that staff from their agency had recently participated in a discussion forum with other federal regulators and other stakeholders on fintech, and, in particular, account aggregation challenges. They stated that they intend to continue to engage other regulators and related industry stakeholders on fintech topics and emerging technology that can have an impact on credit unions and their consumers. In October 2018, NCUA staff advised us that they have been discussing issues related to data aggregation at meetings of the Fintech Interagency Discussion Group, which includes OCC, the Federal Reserve, the Federal Deposit Insurance Corporation, the National Credit Union Administration, and the Bureau of Consumer Financial Protection. In November 2019, NCUA staff said that the agency continues to participate in meetings through the Fintech Interagency Discussion Group and had taken part in a Data Symposium held by the San Francisco Federal Reserve. We plan to follow up with NCUA staff to obtain updates on these efforts and resulting outcomes in the future.

Recommendation: The Comptroller of the Currency should engage in collaborative discussions with other relevant financial regulators in a group that includes all relevant stakeholders and has defined agency roles and outcomes to address issues related to consumers' use of account aggregation services. (Recommendation 9)

Agency: Department of the Treasury: Office of the Comptroller of the Currency
Status: Open

Comments: In a May 2018 letter, OCC noted that its staff have met with the other banking regulators and with market participants about account aggregation issues in the past. In October 2018, OCC staff advised us that issues related to data aggregation were discussed at a June 28, 2018 meeting of the Fintech Interagency Discussion Group, which includes OCC, the Federal Reserve, the Federal Deposit Insurance Corporation, the National Credit Union Administration, and the Bureau of Consumer Financial Protection. We followed up in January 2020 and they confirmed that their collaboration had yet to produce outcomes that would satisfy the recommendation. We plan to follow up with OCC staff to obtain updates on these efforts in the future.

Recommendation: The Chairman of the National Credit Union Administration should formally evaluate the feasibility and benefit of establishing an office of innovation or clear contact point, including at least a website with a dedicated email address. (Recommendation 11)

Agency: National Credit Union Administration
Status: Open

Comments: NCUA officials told us that in August 2018 the agency established a working group to formally evaluate the feasibility of establishing a dedicated work unit to oversee and lead fintech and innovation efforts, including creating a website and monitoring a dedicated e-mail account. NCUA officials indicated that as of November 2019 the working group was deliberating key considerations related to establishing a dedicated work unit. We plan to follow up with NCUA staff to obtain updates on these efforts in the future.

Recommendation: The Chair of the Board of Governors of the Federal Reserve System should formally evaluate the feasibility and benefits to their regulatory capacities of adopting certain knowledge-building initiatives related to financial innovation. (Recommendation 12)

Agency: Federal Reserve System: Board of Governors
Status: Open

Comments: In a May 2018 letter, the Chair of the Federal Reserve Board noted that the Federal Reserve recognizes the importance of formally increasing its knowledge base related to financial innovation. The letter noted that the Federal Reserve has recently organized two nationwide teams of experts tasked with monitoring fintech and related emerging technology trends as they relate to its supervisory and payment system mandates, respectively. These new teams include representation from all of the Federal Reserve System's Reserve Banks and have leadership from Board staff. These teams' critical objectives include ensuring that fintech-related information is shared across the Federal Reserve System and is used to inform relevant supervisory, policy, and outreach strategies. As of February 2020, the agency had no updates on this recommendation. We plan to follow up with Federal Reserve staff to obtain updates on these efforts in the future.

Recommendation: The Chairman of the Commodity Futures Trading Commission should formally evaluate the feasibility and benefits to their regulatory capacities of adopting certain knowledge-building initiatives related to financial innovation. (Recommendation 13)

Agency: Commodity Futures Trading Commission
Status: Open

Comments: We followed up in January 2020 and CFTC described its efforts to address this recommendation, which were encouraging. We are awaiting documentation of these efforts and when we confirm the agency's actions, we will provide updated information.

Recommendation: The Chairman of the National Credit Union Administration should formally evaluate the feasibility and benefits to their regulatory capacities of adopting certain knowledge-building initiatives related to financial innovation. (Recommendation 15)

Agency: National Credit Union Administration
Status: Open

Comments: NCUA officials told us that, as of November 2019, the internal working group that the agency established in August 2018 was evaluating the feasibility and benefits of adopting certain knowledge-building initiatives related to financial innovation. Specifically, the working group was assessing initiatives such as stakeholder outreach, research and collaboration opportunities, grants and other technical assistance, and existing supervisory tools. We plan to follow up with NCUA staff to obtain updates on these efforts in the future.

Recommendation: The Chairman of FCC should track the growth in high bandwidth IoT devices, such as video-streaming devices and optical sensors. (Recommendation 1)

Agency: Federal Communications Commission
Status: Open

Comments: FCC said that it believes it is best to monitor growth of overall Internet traffic and will work with industry and its Technological Advisory Council to monitor growth and ensure that communications infrastructure is sufficient to support the needs of the growing Internet sector. As of October 2019, FCC has not changed its position.

Recommendation: The Chairman of FCC should track the growth in IoT devices relying on unlicensed spectrum. (Recommendation 2)

Agency: Federal Communications Commission
Status: Open

Comments: FCC said that it believes the best way to track growth in IoT devices using unlicensed spectrum it to monitor relevant information, such as published papers and conferences, and work with industry. As of October 2019, FCC has not changed its position and stated that it will be taking no further action.

Recommendation: To help ensure that any future decisions by FCC regarding its efforts under the Communications Act of 1934 are based on comprehensive analysis, the FCC should, as part of its future annual video competition reports, analyze how the ongoing evolution in the video programming market affects competition in the related market for set-top boxes and devices, including how this evolution affects the extent to which consumer choice for devices to access MVPD content remains a relevant aspect of the competitive environment. (Recommendation 1)

Agency: Federal Communications Commission
Status: Open

Comments: As of January 2020, FCC officials said they are taking steps to implement this recommendation and hope to do so by October 2020.

Recommendation: The Secretary of Agriculture should ensure that the Department's Chief Information Officer completes efforts to identify future telecommunications needs and areas for optimization, identifies the costs and benefits of new technology, and aligns USDA's approach with its long-term plans. (Recommendation 3)

Agency: Department of Agriculture
Status: Open

Comments: The U.S. Department of Agriculture (USDA) concurred with our recommendation and stated that it plans to, among other things, provide the EIS vendor community with USDA's future vision and requirements in order to enable each vendor to propose optimal solutions; and update the cost benefit analysis of new technologies while reviewing vendor proposals. However, USDA has not yet provided documentation demonstrating that it has completed these efforts. We will continue to monitor USDA's progress on these efforts.

Recommendation: The Secretary of Agriculture should ensure that the Department's Chief Information Officer identifies transition-related roles and responsibilities related to the management of assets, human capital, and information security, and legal expertise; develops a transition communications plan; and uses configuration and change-management processes in USDA's transition. (Recommendation 4)

Agency: Department of Agriculture
Status: Open

Comments: As we recommended, the U.S. Department of Agriculture (USDA) identified transition roles and responsibilities related to the management of assets, human capital, and information security, and legal expertise. USDA also developed a communications plan and change management plan for the transition. However, the department has not yet demonstrated that it has implemented change management, nor that it is using configuration management for the transition. We will continue to monitor USDA's progress in implementing this recommendation.

Recommendation: The Secretary of Agriculture should ensure that the Department's Chief Information Officer documents the costs and benefits of transition investments, identifies staff resources needed for the remainder of the transition, and analyzes training needs for staff assisting with the transition. (Recommendation 5)

Agency: Department of Agriculture
Status: Open

Comments: U.S. Department of Agriculture (USDA) officials stated that they are in the process of completing an Independent Government Cost Estimate for the transition. The officials also stated that the department is creating an EIS support organization that will address staffing needs for the transition. However, USDA has not yet provided documentation demonstrating that it has completed these efforts. We will continue to monitor USDA's progress in implementing this recommendation.

Recommendation: The Secretary of Agriculture should ensure that the Department's Chief Information Officer demonstrates that the Department's transition goals and measures align with its mission, identifies transition risks related to critical systems and continuity of operations, and identifies mission-critical priorities in USDA's transition timeline. (Recommendation 6)

Agency: Department of Agriculture
Status: Open

Comments: The U.S. Department of Agriculture (USDA) concurred with our recommendation and stated that it plans to (1) incorporate mission-critical priorities into USDA's requests for quotes; (2) ensure that critical systems are inventoried and that their respective transition plans ensure continuity of operations; and (3) prioritize mission-critical functions within its transition timeline. However, USDA has not yet provided documentation demonstrating that it has completed these efforts. We will continue to monitor USDA's progress in implementing this recommendation.

Recommendation: The Secretary of Labor should ensure that the Department's Chief Information Officer verifies the completeness of DOL's inventory of current telecommunications assets and services and establishes a process for ongoing maintenance of the inventory. (Recommendation 7)

Agency: Department of Labor
Status: Open

Comments: Department of Labor (DOL) officials stated that the agency is in the process of developing an inventory of its telecommunications assets and services that are associated with GSA's expiring contracts (e.g., Networx). The officials noted that, as part of the department's transition to EIS, DOL plans to include only limited non-GSA/commercial telecommunications assets and services in its initial transition efforts and inventory. The officials further stated that DOL will not focus on these non-GSA/commercial assets and services until the department completes its transition of assets and services associated with GSA's expiring contracts. We will continue to monitor the department's efforts to develop a complete telecommunications inventory, including assets and services associated with both GSA and non-GSA/commercial contracts, and associated maintenance processes for this inventory.

Recommendation: The Secretary of Labor should ensure that the Department's Chief Information Officer identifies the agency's future telecommunications needs, completes a strategic analysis of the agency's telecommunications requirements, and incorporates the requirements into transition planning. (Recommendation 8)

Agency: Department of Labor
Status: Open

Comments: The Department of Labor (DOL) provided documentation demonstrating that it has identified certain future telecommunications needs for the department, but DOL did not identify these needs using a complete inventory of its current telecommunications assets and services. In addition, the department demonstrated that it had completed a draft strategic analysis of its telecommunications requirements, but this analysis was not yet finalized and approved. Further, the department has not yet demonstrated that it has aligned its identified telecommunications needs with its long-term plans and enterprise architecture. We will continue to monitor DOT's efforts to implement this recommendation.

Recommendation: The Secretary of Labor should ensure that the Department's Chief Information Officer identifies transition-related roles and responsibilities related to the management of assets, human capital, and information security, and legal expertise; develops a transition communications plan; and uses project, configuration, and change-management processes in DOL's transition (Recommendation 9)

Agency: Department of Labor
Status: Open

Comments: Department of Labor (DOL) officials stated that the department is in the process of selecting a project manager to develop the Transition Project Plan and other supporting documentation for the transition, including a communications plan. DOL expects to develop this documentation around March 2020. We will continue to monitor the department's progress on these efforts.

Recommendation: The Secretary of Labor should ensure that the Department's Chief Information Officer identifies the resources needed for the full transition, develops justifications for the costs of changes to hardware and software, identifies staff resources needed for the remainder of the transition, and analyzes training needs for staff assisting with the transition. (Recommendation 10)

Agency: Department of Labor
Status: Open

Comments: Department of Labor (DOL) officials stated that the department is in the process of selecting a project manager to develop the Transition Project Plan and other documentation that would address this recommendation. The officials expect to develop this documentation around March 2020. We will continue to monitor the department's efforts to implement this recommendation.

Recommendation: The Secretary of Labor should ensure that the Department's Chief Information Officer identifies transition risks related to information security, critical systems, and continuity of operations, and identifies mission-critical priorities in DOL's transition timeline. (Recommendation 11)

Agency: Department of Labor
Status: Open

Comments: Department of Labor (DOL) officials stated that the department is in the process of selecting a project manager to develop the Transition Project Plan and other documentation that would address this recommendation. The officials expect to develop this documentation around March 2020. We will continue to monitor the department's efforts to implement this recommendation.

Recommendation: The Chairman of the Securities and Exchange Commission should ensure that the Commission's Chief Information Officer identifies the agency's future telecommunications needs, areas for optimization, and the costs and benefits of new technology; completes a strategic analysis of the commission's telecommunications requirements; and incorporates the identified requirements into transition planning. (Recommendation 12)

Agency: United States Securities and Exchange Commission
Status: Open

Comments: The Securities and Exchange Commission (SEC) concurred with our recommendation. SEC stated that it plans to establish an EIS planning team comprised of key IT personnel from across the agency to identify, among other things, future needs and areas for improvement, so that SEC can incorporate the results into its transition planning. However, SEC has not yet provided documentation demonstrating that it has completed these efforts. We will continue to monitor SEC's progress implementing this recommendation.

Recommendation: The Chairman of the Securities and Exchange Commission should ensure that the Commission's Chief Information Officer identifies roles and responsibilities related to the management of assets and human capital and legal expertise for the transition; includes key local and regional officials in SEC's transition communications plan; and completes efforts to use configuration and change management processes in the transition. (Recommendation 13)

Agency: United States Securities and Exchange Commission
Status: Open

Comments: The Securities and Exchange Commission (SEC) concurred with our recommendation and stated that it plans to document the roles and responsibilities of key EIS transition team members across the agency. The agency also plans to develop a transition communications plan that includes configuration and change management practices. However, SEC has not yet provided documentation demonstrating that it has completed these efforts. We will continue to monitor SEC's progress implementing this recommendation.

Recommendation: The Chairman of the Securities and Exchange Commission should ensure that the Commission's Chief Information Officer identifies the resources needed for the full transition, justifies requests for transition resources, identifies staff resources needed for the full transition, and completes efforts to analyze training needs for staff assisting with the transition. (Recommendation 14)

Agency: United States Securities and Exchange Commission
Status: Open

Comments: In response to our recommendation, the Securities and Exchange Commission (SEC) provided a high-level budget estimate for the transition. However, it was unclear what costs were included in this estimate and the agency did not provide documentation that justified the costs identified. In addition, SEC has not yet provided an analysis of the staff resources it needs for the transition, nor an analysis of the training needs for the staff assisting with the transition. We will continue to monitor SEC's efforts to implement this recommendation.

Recommendation: The Chairman of the Securities and Exchange Commission should ensure that the Commission's Chief Information Officer completes efforts to demonstrate that the commission's transition goals and measures align with its mission, identifies transition risks related to critical systems and continuity of operations, and identifies mission-critical priorities in SEC's transition timeline. (Recommendation 15)

Agency: United States Securities and Exchange Commission
Status: Open

Comments: The Securities and Exchange Commission (SEC) has demonstrated that its transition goals and measures align with its mission. In addition, the commission has identified transition risks related to continuity of operations. However, SEC has not yet identified transition risks related to its critical systems, nor identified mission-critical priorities in its transition timeline. We will continue to monitor SEC's progress on these efforts.

Recommendation: The Commissioner of the Social Security Administration should ensure that the Administration's Chief Information Officer verifies the completeness of SSA's inventory of current telecommunications assets and services and establishes a process for ongoing maintenance of the inventory regarding services other than local and long-distance telecommunications. (Recommendation 16)

Agency: Social Security Administration
Status: Open

Comments: Social Security Administration (SSA) officials stated that the agency is in the process of making significant changes to its procedures and policy for its telecommunications inventory. The officials expect to have a complete inventory of their telecommunications assets and services by 2021. We will continue to monitor SSA's efforts to implement this recommendation.

Recommendation: The Commissioner of the Social Security Administration should ensure that the Administration's Chief Information Officer completes identification of the agency's future telecommunications needs and aligns its approach with the agency's enterprise architecture. (Recommendation 17)

Agency: Social Security Administration
Status: Open

Comments: Social Security Administration (SSA) officials stated that the agency's priority is to transition its telecommunications services on a like-for-like basis, in order to complete the transition before its existing contracts expire, as well as to receive immediate cost savings. Officials also stated that, once SSA has released its EIS solicitations, they plan to analyze the alignment of their future telecommunications needs with the agency's enterprise architecture. However, SSA has not yet provided documentation demonstrating that it has completed this analysis. We will continue to monitor SSA's progress on these efforts.

Recommendation: The Commissioner of the Social Security Administration should ensure that the Administration's Chief Information Officer uses configuration and change-management processes in its transition. (Recommendation 18)

Agency: Social Security Administration
Status: Open

Comments: The Social Security Administration (SSA) provided documentation demonstrating that it has implemented a change management process, including establishing a change control board that is scheduled to meet on a weekly basis and tracking change requests in its IT Service Management tool. However, SSA has not yet demonstrated that it has implemented configuration management processes for its transition. We will continue to monitor SSA's efforts to implement these processes.

Recommendation: The Commissioner of the Social Security Administration should ensure that the Administration's Chief Information Officer identifies the resources needed for the full transition, documents the costs and benefits of transition investments, identifies staff resources needed for the remainder of the transition, and analyzes training needs for all staff working on the transition. (Recommendation 19)

Agency: Social Security Administration
Status: Open

Comments: The Social Security Administration (SSA) provided documentation demonstrating that it has identified the staff resources and required training for staff working on the transition. However, SSA has not yet provided documentation demonstrating that it has identified the funding resources needed for the full transition, nor documented the costs and benefits of transition investments, such as for resource requests related to transition program management staff. We will continue to monitor SSA's efforts to fully implement this recommendation.

Recommendation: The Commissioner of the Social Security Administration should ensure that the Administration's Chief Information Officer completes efforts to identify measures of success for the transition, identifies transition risks related to critical systems and continuity of operations, and identifies mission-critical priorities in SSA's transition timeline. (Recommendation 20)

Agency: Social Security Administration
Status: Open

Comments: The Social Security Administration (SSA) has identified transition risks related to critical systems and continuity of operations. In addition, SSA officials stated that the agency is in the process of identifying (1) agency-specific measures of success for the transition and (2) mission-critical priorities that need to be incorporated into its transition timeline. However, SSA has not yet provided documentation demonstrating that it has completed these efforts. We will continue to monitor SSA's efforts to fully implement this recommendation.

Recommendation: The Secretary of Transportation should ensure that the Department's Chief Information Officer verifies the completeness of DOT's inventory of current telecommunications assets and services and establishes a process for ongoing maintenance of the inventory. (Recommendation 21)

Agency: Department of Transportation
Status: Open

Comments: Department of Transportation (DOT) officials stated that the department has developed a comprehensive inventory of its telecommunications assets and services, and maintains this inventory on a regular basis. However, as of August 2020, the department has not yet provided documentation of its inventory or the associated maintenance processes. We will continue to monitor DOT's efforts to complete this inventory and establish a maintenance process for it.

Recommendation: The Secretary of Transportation should ensure that the Department's Chief Information Officer identifies the agency's future telecommunications needs, areas for optimization, and costs and benefits of new technology; and completes efforts to align DOT's approach with its long-term plans and enterprise architecture. (Recommendation 22)

Agency: Department of Transportation
Status: Open

Comments: Department of Transportation (DOT) officials stated that they conducted an assessment of the department's future telecommunication requirements. According to officials, the results of this analysis were included in an EIS Statement of Work. However, DOT has not demonstrated that it used its complete inventory of existing services to identify its future needs. DOT also stated that it has conducted extensive research to identify areas for optimization and sharing, but did not provide documentation of this research. Further, DOT has not provided evidence that the department has aligned its transition approach with its long-term plans and enterprise architecture. We will continue to follow-up with DOT regarding these efforts.

Recommendation: The Secretary of Transportation should ensure that the Department's Chief Information Officer identifies roles and responsibilities related to the management of assets and human capital and legal expertise for the transition; develops a transition communications plan; and fully uses configuration and change-management processes in DOT's transition. (Recommendation 23)

Agency: Department of Transportation
Status: Open

Comments: The Department of Transportation (DOT) developed a transition communications plan and identified roles and responsibilities related to legal expertise, the management of assets and human capital. DOT has also provided evidence that they are requiring the use of change management in the transition. However, DOT has not demonstrated that it is applying configuration management processes to DOT's transition efforts. We will continue to monitor DOT's efforts to implement this recommendation.

Recommendation: The Secretary of Transportation should ensure that the Department's Chief Information Officer fully identifies the resources needed for the full transition, justifies requests for transition resources, identifies staff resources needed for the full transition, and fully analyzes training needs for staff assisting with the transition. (Recommendation 24)

Agency: Department of Transportation
Status: Open

Comments: Department of Transportation (DOT) developed a transition resource plan that identifies functional roles needed for the transition, such as network engineers and staff to place new telecommunications orders. However, the transition resource plan did not identify the staffing levels needed for each of the functional roles, such as how many network engineers are necessary, and DOT did not provide other documentation that fully identifies these resources needs. In addition, DOT has not yet provided documentation that it has identified the funding needed for the full transition, justified requests for transition resources, or fully analyzed training needs for staff assisting with the transition. We will continue to follow-up on DOT's efforts to implement this recommendation.

Recommendation: The Secretary of Transportation should ensure that the Department's Chief Information Officer fully demonstrates that DOT's transition goals and measures align with its mission; completely identifies transition risks related to information security, critical systems, and continuity of operations; and fully identifies mission-critical priorities in the transition timeline. (Recommendation 25)

Agency: Department of Transportation
Status: Open

Comments: Department of Transportation (DOT) provided evidence that its transition goals and measures align with its mission and that it has identified the risks associated with the EIS transition. However, DOT has not yet provided documentation demonstrating that it has identified mission-critical priorities in its transition timeline. We will continue to monitor DOT's efforts to implement this recommendation.

Recommendation: To address control weaknesses and related program-integrity risks we identified in Lifeline, the Chairman of FCC should require Commissioners to review and approve, as appropriate, spending above the budget in a timely manner.

Agency: Federal Communications Commission
Status: Open

Comments: On November 16, 2017, FCC adopted a Notice of Proposed Rulemaking that proposed to adopt a self-enforcing budget mechanism for the Lifeline program. However, as of January 2020, FCC has not yet adopted a decision on this proposal.

Recommendation: To address control weaknesses and related program-integrity risks we identified in Lifeline, the Chairman of FCC should establish time frames to evaluate compliance plans and develop instructions with criteria for FCC reviewers how to evaluate these plans to meet Lifeline's program goals.

Agency: Federal Communications Commission
Status: Open

Comments: According to the FCC as of January 28, 2020, the agency does not currently have a schedule to implement this recommendation.

Recommendation: To address control weaknesses and related program-integrity risks we identified in Lifeline, the Chairman of FCC should develop an enforcement strategy that details what violations lead to penalties and apply this as consistently as possible to all Lifeline providers to ensure consistent enforcement of program violations; the strategy should include a rationale and method for resource prioritization to help maximize the effectiveness of enforcement activities.

Agency: Federal Communications Commission
Status: Open

Comments: FCC's enforcement must remain flexible in order to be responsive to the ever changing variants that Universal Service Fund violations may take. According to the FCC, as with all Commission matters, the Chairman may indicate agency priorities in terms of subject matter, but the Chairman does not dictate which cases the Enforcement Bureau pursues. The Office of the Chairman, in consultation with the Enforcement Bureau, has articulated priorities with respect to enforcement activities in the Lifeline area including, but not limited to: 1. Detection and elimination of willful attempts to defraud the Lifeline Program by claiming support subsidies for ineligible or fictitious subscribers. 2. Detection and elimination of unlawful claims for enhanced support for Tribal areas. 3. Detection and elimination of carrier collections of multiple support subsidies for duplicative subscribers, regardless of the source of duplications. 4. Detection and elimination of carrier failures to de-enroll inactive or ineligible subscribers. The Enforcement Bureau has focused its enforcement efforts in line with these priorities and has taken a number of actions since the publication of GAO-17-538.

Recommendation: To address our findings regarding the USF, the Chairman of FCC should take action to respond to USAC requests for guidance and address pending requests concerning USF contribution requirements to ensure the contribution factor is based on complete information and that USF pass-through charges are equitable.

Agency: Federal Communications Commission
Status: Open

Comments: According to the FCC, the FCC is scheduled to complete implementing this recommendation in December 2021.

Recommendation: To improve RUS's management of the Infrastructure Program, Broadband Program, and Community Connect by more closely following leading practices for broadband loan- and grant-program management, the Secretary of Agriculture should direct RUS to establish and implement procedures to conduct periodic evaluations of completed grant projects to determine the outcomes associated with these projects, and analyze the information gained to assess if any programmatic changes are needed to improve the Community Connect program.

Agency: Department of Agriculture
Status: Open

Comments: As of June 22, 2020, USDA has not provided an update regarding its plans to implement staff procedures for conducting periodic evaluations of completed grant projects to measure the success of meeting the program goals. Once RUS provides an update regarding what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: To improve RUS's management of the Infrastructure Program, Broadband Program, and Community Connect by more closely following leading practices for broadband loan- and grant-program management, the Secretary of Agriculture should direct RUS to establish a timeline for implementing a centralized internal system for staff to obtain relevant and timely program data for use in managing and monitoring loans and grant awards.

Agency: Department of Agriculture
Status: Open

Comments: As of June 22, 2020, RUS has not provided an update on how it will more efficiently manage and monitor RUS loan and grant awards. Once RUS provides an update regarding what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: To improve RUS's management of the Infrastructure Program, Broadband Program, and Community Connect by more closely following leading practices for broadband loan- and grant-program management, the Secretary of Agriculture should direct RUS to develop, update, and maintain complete written policies and procedures for RUS's programs as a way to retain and communicate organizational knowledge internally among agency staff. RUS should determine the critical documentation that should be created or updated, including considering documentation such as loan-application review guidance and employee manuals for each of the three programs.

Agency: Department of Agriculture
Status: Open

Comments: As of June 22, 2020, RUS has not provided an update on how it plans to identify and prioritize critical manuals and instructions that will need to be developed or updated and formulate work plans to develop or update each of them. Once RUS provides an update regarding what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Chairman of FCC should review joint sales agreements (JSA) filed in stations' public inspection files to identify stations involved in those JSAs and take action to ensure that each station involved has filed its JSA as required.

Agency: Federal Communications Commission
Status: Open

Comments: As of April 2020, FCC had not performed a review of joint sales agreements (JSA) as GAO recommended, and an FCC official stated that FCC had no plans to perform such a review. FCC issued a public notice in 2016 reminding stations of their obligation to file JSAs in their public inspection files in 2016. This recommendation remains open.

Recommendation: To strengthen FCC's data collection efforts, the Chairman of FCC should develop a strategy to gather additional information on the IP transition to assess the transition's potential effects on public safety and consumers.

Agency: Federal Communications Commission
Status: Open

Comments: As of April 2020, FCC officials said they are exploring options to address this recommendation and hope to have it implemented in fiscal year 2020.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Commerce should ensure a reliable department-wide inventory of mobile service contracts is developed and maintained.

Agency: Department of Commerce
Status: Open

Comments: As of January 2020, the Department of Commerce had not implemented this recommendation. In July 2018, the department provided an inventory that shows, by service provider and department component, the number of devices per rate plan and monthly rate; however, the inventory did not include the number of voice minutes, gigabytes of data, and text messages allowed per line per month. Furthermore, the department had not demonstrated that it had accounted for all of its mobile service contracts. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Commerce should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Commerce
Status: Open

Comments: As of January 2020, the department had not addressed the recommendation. In July 2018, the department described steps it was taking to identify lines that were inactive for a period of three or more continuous months (zero usage). However, as of January 2020, the department had not demonstrated that it has established documented procedures that address the elements of our recommendation. We will continue to monitor the department's progress.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Defense should ensure an inventory of mobile devices and services is established department-wide (i.e., all components' devices and associated services are accounted for).

Agency: Department of Defense
Status: Open

Comments: The Department of Defense partially concurred with our recommendation; however, as of January 2020, the department had not implemented it. In response to our report, the department stated that it agreed that such an inventory has merits, but that maintaining one comes at considerable expense and effort. The department also stated, in 2016, that while it does not maintain a single, centralized device level inventory, the military departments track and manage their own devices and services . As we stated in our report, the inventory need not be generated centrally at the headquarters level; the department can compile a comprehensive inventory using its components' complete inventories. As of January 2020, the department had not demonstrated that all its components had inventories of unique devices and associated services. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Defense should ensure a reliable department-wide inventory of mobile service contracts is developed and maintained.

Agency: Department of Defense
Status: Open

Comments: The Department of Defense stated that it partially concurred with our recommendation; and has taken steps to address it. However, as of January 2020, the department had not demonstrated that it had implemented the recommendation. In response to our report, the department stated that it agreed that developing an inventory of mobile device contracts has merits, especially in a time of restricted government spending. The department also described several efforts it had undertaken to enhance mobile device management. However, as we stated in our report, any approach to managing mobile device contracts will be hampered by the lack of complete information on the contracts that are already in place. In August 2018, the department developed an inventory of mobile service contracts. However, the department had not demonstrated that the inventory included all its components' mobile service contracts. In August 2019, the department described steps it was taking to ensure that it has a complete inventory of mobile service contracts. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Health and Human Services should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Health and Human Services
Status: Open

Comments: As of December 2019, the Department of Health and Human Services had not implemented this recommendation. We will continue to monitor the department's implementation of this recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Homeland Security should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Homeland Security
Status: Open

Comments: In October 2019, the Department of Homeland Security developed an asset and inventory management plan for managing devices under its enterprise blanket purchase agreement. The plan includes procedures for assessing devices for zero usage; however, it does not include procedures for assessing over and under usage. The department also has not demonstrated that it has established procedures for devices not covered by its enterprise blanket purchase agreement.We will continue to monitor the department's efforts.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Interior should ensure an inventory of mobile devices and services is established department-wide (i.e., all components' devices and associated services are accounted for).

Agency: Department of the Interior
Status: Open

Comments: The Department of the Interior has not demonstrated that it has fully implemented this recommendation. As of January 2020, the department demonstrated that only one of its components, the Bureau of Reclamation, had an inventory of mobile devices and associated services. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Interior should ensure a reliable department-wide inventory of mobile service contracts is developed and maintained.

Agency: Department of the Interior
Status: Open

Comments: As of January 2020, the Department of the Interior had not demonstrated that it had fully addressed this recommendation. In August 2019, the department developed an inventory of mobile service contracts. However, the department did not demonstrate that it had accounted for all of its mobile service contracts. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Attorney General should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Justice
Status: Open

Comments: As of January 2020, the Department of Justice has made progress implementing this recommendation; however, more remains to be done. Specifically, in response to our findings, in April 2015, the department's Chief Information Officer issued a memo that required components to establish procedures for regular reviews of invoices for wireless services to identify unused and underused devices or services, as well as any over-usage charges to service plans. One of the components we reviewed, the Federal Bureau of Investigation, established procedures in July 2016 to monitor mobile device usage. In addition, the Justice Management Division (JMD) established procedures in May 2019 that apply to JMD as well some but not all other components. The other component we reviewed in our report, the Drug Enforcement Agency, had not established procedures that address our recommendation. We will continue to monitor the department's progress.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of State should ensure an inventory of mobile devices and services is established department-wide (i.e., all components' devices and associated services are accounted for).

Agency: Department of State
Status: Open

Comments: As of January 2020, the Department of State had not demonstrated that it has implemented this recommendation. The department has inventories of mobile device; however, the inventories do not include the services associated with each device. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of State should ensure a reliable department-wide inventory of mobile service contracts is maintained.

Agency: Department of State
Status: Open

Comments: As of January 2020, the Department of State had not implemented this recommendation. In June 2019, the department said it has a Telecom Expense Management System which can be used to document an inventory of domestic service contracts; however, the department did not provide the inventory. Furthermore, the department did not demonstrate that it has an inventory of international service contracts. We will continue to monitor the department's efforts to implement the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of Transportation should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of Transportation
Status: Open

Comments: As of January 2020, the Department of Transportation had not addressed the recommendation. In December 2019, an official from the department's Audit Relations and Program Improvement office stated that all the department's telecommunication devices are managed through two programs and that these programs have mechanisms in place to ensure that telecommunications are managed in an effective and efficient manner. However, as of January 2020, the department had not provided evidence to demonstrate that it had implemented the recommendation. We will continue to monitor the department's efforts.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Treasury should ensure an inventory of mobile devices and services is established department-wide (i.e., all components' devices and associated services are accounted for).

Agency: Department of the Treasury
Status: Open

Comments: As of January 2020, the Department of the Treasury had not implemented the recommendation. In August 2019, the department stated that it had established enterprise-wide procurement vehicles for mobile devices. However, as of January 2020, the department had not demonstrated that it has an inventory of mobile devices and associated service information. We will continue to monitor the department's progress in implementing this recommendation.

Recommendation: To help the agency effectively manage spending on mobile devices and services, the Administrator of the National Aeronautics and Space Administration should ensure a complete inventory of mobile devices and associated services is established.

Agency: National Aeronautics and Space Administration
Status: Open

Comments: As of January 2020, the National Aeronautics and Space Administration (NASA) had not implemented the recommendation. We reported in May 2015, that NASA had an inventory of mobile devices and associated service information which included most, but not all, of the devices used by the agency. In November 2019, NASA's Office of the Chief Information Officer (OCIO) stated that the agency was in the process of enrolling devices in a new mobile device management tool, and that when the approximately 15 percent of devices that are not currently on NASA's new End-User Services Technology contract are brought on the contract, NASA will have a monthly deliverable depicting the services of all mobile devices. We will continue to monitor NASA's implementation of this recommendation.

Recommendation: To help the agency effectively manage spending on mobile devices and services, the Administrator of the National Aeronautics and Space Administration should ensure a reliable inventory of mobile service contracts is developed and maintained.

Agency: National Aeronautics and Space Administration
Status: Open

Comments: As of January 2020, the National Aeronautics and Space Administration (NASA) had not demonstrated that it has implemented the recommendation. NASA's Office of the Chief Information Officer (OCIO) stated that NASA had established, on September 1, 2019, the NASA End-User Services and Technology contract to procure mobile services, but as of November 2019, had not yet included 15 percent of its devices on the new contract. We will continue to monitor NASA's efforts to develop and maintain a mobile services contract inventory as described in our report.

Recommendation: To help the agency effectively manage spending on mobile devices and services, the Administrator of the National Aeronautics and Space Administration should ensure procedures to monitor and control spending are established agency-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: National Aeronautics and Space Administration
Status: Open

Comments: As of January 2020, the National Aeronautics and Space Administration (NASA) had not demonstrated that it had implemented the recommendation. In November 2019, NASA's Office of the Chief Information Officer (OCIO) stated that as part of enterprise mobility service contract deliverables, NASA requires monthly reports to monitor and optimize usage (zero, under, and over). NASA's OCIO also stated that the agency established role-based privileges to monitor and report on this activity agency-wide. However, the agency has not demonstrated that it has established procedures to assess device usage in accordance with our recommendation. We will continue to monitor NASA's implementation of the recommendation.

Recommendation: To help the department effectively manage spending on mobile devices and services, the Secretary of the Treasury should ensure procedures to monitor and control spending are established department-wide. Specifically, ensure that (1) procedures include assessing devices for zero, under, and over usage; (2) personnel with authority and responsibility for performing the procedures are identified; and (3) the specific steps to be taken to perform the process are documented.

Agency: Department of the Treasury
Status: Open

Comments: As of January 2020, the Department of the Treasury had not demonstrated that it has implemented the recommendation. In August 2019, an official from the department's Office of the Chief Information Officer stated that the department was collecting and analyzing information on voice and data utilization. However, as of January 2020, the department had not demonstrated that it had established procedures in accordance with our recommendation. We will continue to monitor the department's progress in implementing this recommendation.

Recommendation: To improve performance management of the Telecommunications Relay Service, following the establishment of TRS's performance goals, the Chairman of the Federal Communications Commission should conduct a robust risk assessment that can help FCC design a comprehensive internal-control system.

Agency: Federal Communications Commission
Status: Open

Comments: FCC indicated that a draft document was under review to implement this recommendation and would be approved before the end of FY-19. However, in September 2019, when we asked FCC for an update, we did not receive one. We will continue to communicate with FCC about the status of this recommendation.

Recommendation: The FCC should conduct a program evaluation to determine the extent to which the Lifeline program is efficiently and effectively reaching its performance goals of ensuring the availability of voice service for low-income Americans while minimizing the contribution burden on consumers and businesses.

Agency: Federal Communications Commission
Status: Open

Comments: In a 2016 Lifeline modernization order, which FCC adopted March 31, 2016, FCC instructed the Universal Service Administrative Company (USAC) to hire an outside, independent third-party evaluator to complete a program evaluation of the modernized Lifeline program. FCC noted that the program evaluation would enable FCC and the public to have better information about the operation and effectiveness of the Lifeline program. Such an evaluation will likely address our recommendation. FCC's order stipulated that USAC must submit the evaluation's findings to FCC by December 2020. In July 2020, FCC officials told us the evaluation should be complete by October 2020. We will update the status of this recommendation after we receive additional information from FCC.

Recommendation: Congress should consider whether FCC's excess fees (approximately $66 million through fiscal year 2011) should be appropriated for FCC's use, or, if not, what the disposition of these funds should be, and whether to change FCC's annual appropriations language to permit reconciliation of excess collections or to govern FCC's handling of any future excess collections.

Agency: Congress
Status: Open

Comments: As of fiscal year 2019, FCC's annual appropriations continued to prohibit the use of any excess fees from the current year or previous years.