Suchergebnisse

Intro -- PERSONAL IDENTIFIABLE INFORMATION AND DATA BREACHES -- PERSONAL IDENTIFIABLE INFORMATION AND DATA BREACHES -- CONTENTS -- PREFACE -- Chapter 1 DATA BREACH NOTIFICATION∗ -- WHAT GAO FOUND -- WHY GAO DID THIS STUDY -- WHAT GAO RECOMMENDS -- ABBREVIATIONS -- CONCLUSIONS -- RECOMMENDATION FOR EXECUTIVE ACTION -- AGENCY COMMENTS AND OUR EVALUATION -- LIST OF REQUESTERS -- APPENDIX I: BRIEFING TO STAFF OF CONGRESSIONAL REQUESTERS -- INTRODUCTION -- OBJECTIVE, SCOPE, AND METHODOLOGY -- RESULTS IN BRIEF -- BACKGROUND -- DATA BREACH NOTIFICATION LESSONS LEARNED -- Rapid Internal Notification -- Core Decision-Making Group -- Obtaining Contact Information -- Credit Monitoring -- Interaction with the Public -- Internal Training and Awareness -- Contractor Responsibilities -- CONCLUSIONS -- AGENCY COMMENTS -- RECOMMENDATION -- ATTACHMENT I: SUMMARY OF DATA BREACHES AT FIVE AGENCIES -- Agriculture (USDA) -- Department of Defense (Navy) -- Education -- Health and Human Services (HHS) -- Transportation -- APPENDIX II: COMMENTS FROM THE OFFICE OF MANAGEMENT AND BUDGET -- APPENDIX III: COMMENTS FROM THE DEPARTMENT OF VETERANS AFFAIRS -- REFERENCES -- Appendixes -- Chapter 2 USE OF DATA FROM INFORMATION RESELLERS∗ -- WHAT GAO FOUND -- WHY GAO DID THIS STUDY -- WHAT GAO RECOMMENDS -- ABBREVIATIONS -- RESULTS IN BRIEF -- BACKGROUND -- Federal Laws and Guidance Govern Use of Personal Information in Federal Agencies -- The Fair Information Practices Are Widely Agreed to Be Key Principles for Privacy Protection -- AGENCIES USED GOVERNMENTWIDE CONTRACTS TO OBTAIN PERSONAL INFORMATION FROM INFORMATION RESELLERS FOR A VARIETY OF PURPOSES -- DOJ and DHS Used Information Resellers Primarily for Law Enforcement and Counterterrorism -- SSA and State Used Information Resellers Primarily for Fraud Prevention and Detection.

Border fencing is intended to benefit border security operations in various ways, according to officials from the U.S. Border Patrol (Border Patrol), which is within the Department of Homeland Security's (DHS) U.S. Customs and Border Protection (CBP). For example, according to officials, border fencing supports Border Patrol agents' ability to execute essential tasks, such as identifying illicit-cross border activities. CBP collects data that could help provide insight into how border fencing contributes to border security operations, including the location of illegal entries. However, CBP has not developed metrics that systematically use these, among other data it collects, to assess the contributions of border fencing to its mission. For example, CBP could potentially use these data to determine the extent to which border fencing diverts illegal entrants into more rural and remote environments, and border fencing's impact, if any, on apprehension rates over time. Developing metrics to assess the contributions of fencing to border security operations could better position CBP to make resource allocation decisions with the best information available to inform competing mission priorities and investments. CBP is taking a number of steps to sustain tactical infrastructure (TI) along the southwest border; however, it continues to face certain challenges in maintaining this infrastructure, such as addressing maintenance of roads owned or operated by other public and private entities. In 2014, according to Border Patrol officials, Border Patrol began implementing the Requirements Management Process that is designed to facilitate planning for funding and deploying TI and other requirements. Border Patrol headquarters and sector officials told GAO that Border Patrol lacks adequate guidance for identifying, funding, and deploying TI needs as part of this process. In addition, officials reported experiencing some confusion about their roles and responsibilities in this process. Developing guidance on this process would be consistent with federal internal control standards and would provide more reasonable assurance that the process is consistently followed across Border Patrol. This is a public version of a For Official Use Only—Law Enforcement Sensitive report that GAO issued in December 2016. Information DHS deemed For Official Use Only—Law Enforcement Sensitive has been redacted. In fiscal years 2013 through 2015, Border Patrol recorded a total of 2.1 million estimated known illegal entries between ports of entry along the southwest border. In an effort to secure the border between ports of entry, CBP spent approximately $2.4 billion between fiscal years 2007 and 2015 to deploy TI — fencing, gates, roads, bridges, lighting, and drainage infrastructure—along the nearly 2,000 mile southwest border. GAO was asked to review the use of border fencing along the southwest border. In this report, GAO examines (1) border fencing's intended contributions to border security operations and the extent to which CBP has assessed these contributions and (2) the extent that CBP has processes in place to ensure sustainment and deployment of TI along the southwest border and challenges in doing so. GAO reviewed CBP documentation and data and interviewed officials in headquarters and three southwest border locations. These locations were selected based on CBP's extensive investments in TI in such areas. GAO recommends that Border Patrol develop metrics to assess the contributions of pedestrian and vehicle fencing to border security along the southwest border and develop guidance for its process for identifying, funding, and deploying TI assets for border security operations. DHS concurred with the recommendations.

There is widespread concern that the rising costs of higher education are making college unaffordable for many students and their families. Federal and state support is central to promoting college affordability; however, persistent state budget constraints have limited funding for public colleges. GAO was asked to study state policies affecting affordability and identify approaches to encourage states to make college more affordable. This report examines, among other things, how state financial support and tuition have changed at public colleges over the past decade. It also examines how the federal government works with states to improve college affordability and what additional approaches are available for doing so. In conducting this work, GAO analyzed trends in state funding for public colleges, tuition, and state student aid using data from the U.S. Department of Education for all public sector colleges from fiscal years 2003 through 2012, the most recent data available at the time of this study. GAO also identified academic studies on state higher education policies and affordability published since 2011 and interviewed 25 academic experts and organizations in the fields of higher education or state policy. Finally, GAO reviewed Education programs and proposals and obtained perspectives from experts and organizations to identify approaches the federal government could use to incentivize state action. ; United States Government Accountability Office

A letter report issued by the Government Accountability Office with an abstract that begins "Of the $595 million identified by Labor as having been appropriated or allocated specifically for green jobs activities since 2009, approximately $501 million went toward efforts with training and support services as their primary objective, with much of that funding provided by the American Recovery and Reinvestment Act of 2009 (Recovery Act). Because the Recovery Act directed federal agencies to spend funds quickly and prudently, Labor implemented a number of high-investment green jobs efforts simultaneously. As a result, in some cases, Recovery Act training programs were initiated prior to a full assessment of the demand for green jobs, which presented challenges for grantees. While Labor's internal agencies initially communicated with each other and with other federal agencies after the Recovery Act was passed, most Recovery Act grants have ended or are winding down."

A letter report issued by the Government Accountability Office with an abstract that begins "As with conventional oil and gas development, requirements from eight federal environmental and public health laws apply to unconventional oil and gas development. For example, the Clean Water Act (CWA) regulates discharges of pollutants into surface waters. Among other things, CWA requires oil and gas well site operators to obtain permits for discharges of produced water—which includes fluids used for hydraulic fracturing, as well as water that occurs naturally in oil- or gas-bearing formations—to surface waters. In addition, the Resource Conservation and Recovery Act (RCRA) governs the management and disposal of hazardous wastes, among other things. However, key exemptions or limitations in regulatory coverage affect the applicability of six of these environmental and public health laws. For example, CWA also generally regulates stormwater discharges by requiring that facilities associated with industrial and construction activities get permits, but the law and its regulations largely exempt oil and gas well sites. In addition, oil and gas exploration and production wastes are exempt from RCRA hazardous waste requirements based on a regulatory determination made by the Environmental Protection Agency (EPA) in 1988. EPA generally retains its authorities under federal environmental and public health laws to respond to environmental contamination."

Testimony issued by the Government Accountability Office with an abstract that begins "Agencies across the government are increasingly reliant on contractors to execute their missions. With hundreds of billions of taxpayer dollars at stake, the government needs strong controls to provide reasonable assurance that these contract funds are not being lost to improper payments (fraud and errors), waste, and mismanagement. Effective contract oversight, which includes effective internal controls throughout the contracting process, is essential to protecting government and taxpayer interests. Standards for Internal Control in the Federal Government provides the overall framework for internal control, which includes the control environment, risk assessment, control activities, information and communication, and monitoring. Contract auditing is a control mechanism intended to provide those responsible for government procurement with financial information and advice relating to contractual matters and the effectiveness, efficiency, and economy of contractors' operations. Today's testimony describes the (1) contracting cycle and related internal controls, (2) Defense Contract Audit Agency (DCAA) and its role in performing contract audits for the Department of Defense (DOD) and other federal agencies, and (3) risks associated with ineffective contract controls and auditing. GAO's testimony is based on prior reports and testimonies, as listed at the end of this statement."

Testimony issued by the Government Accountability Office with an abstract that begins "This testimony discusses issues related to possible changes to the Federal Employees' Compensation Act (FECA) program, a topic that we have reported on in the past. At the end of chargeback year 2010, the FECA program, administered by the Department of Labor (Labor) had paid more than $1.88 billion in wage-loss compensation, impairment, and death benefits, and another $898.1 million for medical and rehabilitation services and supplies. Currently, FECA benefits are paid to federal employees who are unable to work because of injuries sustained while performing their federal duties, including those who are at or older than retirement age. Concerns have been raised that federal employees on FECA receive benefits that could be more generous than under the traditional federal retirement system and that the program may have unintended incentives for beneficiaries to remain on the FECA program beyond the traditional retirement age. Over the past 30 years, there have been various proposals to change the FECA program to address this concern. Recent policy proposals to change the way FECA is administered for older beneficiaries share characteristics with past proposals we have discussed in prior work. In August 1996, we reported on the issues associated with changing FECA benefits for older beneficiaries. Because FECA's benefit structure has not been significantly amended in more than 35 years, the policy questions raised in our 1996 report are still relevant and important today. This testimony will focus on (1) previous proposals for changing FECA benefits for older beneficiaries and (2) questions and associated issues that merit consideration in crafting legislation to change benefits for older beneficiaries. This statement is drawn primarily from our 1996 report in which we solicited views from selected federal agencies and employee groups to identify questions and associated issues with crafting benefit changes. For that report, we also reviewed relevant laws and analyzed previous studies and legislative proposals that would have changed benefits for older FECA beneficiaries. The perception that many retirement-age beneficiaries were receiving more generous benefits on FECA had generated two alternative proposals to change benefits once beneficiaries reach the age at which retirement typically occurs: (1) converting FECA benefits to retirement benefits and, (2) changing FECA wage-loss benefits by establishing a new FECA annuity. We also discussed a number of issues to be considered in crafting legislation to change benefits for older beneficiaries. Going forward, Congress may wish to consider the following questions in assessing current proposals for change: (1) How would benefits be computed? (2) Which beneficiaries would be affected? (3) What criteria, such as age or retirement eligibility, would initiate changed benefits? (4) How would other benefits, such as FECA medical and survivor benefits, be treated and administered? (5) How would benefits, particularly retirement benefits, be funded?"

Testimony issued by the Government Accountability Office with an abstract that begins "The Energy Policy Act of 2005 was enacted in part to expedite domestic oil and gas development. Section 390 of the act authorized the Department of the Interior's Bureau of Land Management (BLM) to use categorical exclusions to streamline the environmental analysis required under the National Environmental Policy Act of 1969 (NEPA) when approving certain oil and gas activities. Numerous questions have been raised about how and when BLM should use these section 390 categorical exclusions. In September 2009, GAO reported on BLM's first 3 years of experience-- fiscal years 2006 through 2008--using section 390 categorical exclusions. This testimony is based on GAO's September 2009 report (GAO-09-872) and updated with information on court decisions that have been reached since the report was issued. The testimony focuses on (1) the extent to which BLM used section 390 categorical exclusions and the benefits, if any, associated with their use; (2) the extent to which BLM complied with the Energy Policy Act of 2005 and agency guidance; (3) key concerns, if any, associated with section 390 categorical exclusions; and (4) how BLM has responded to GAO's recommendations and other recent developments. For its September 2009 report, GAO analyzed a nongeneralizable random sample of 215 section 390 categorical exclusion decision documents from all BLM field offices that used section 390 categorical exclusions and interviewed agency officials and others."

Testimony issued by the Government Accountability Office with an abstract that begins "The U.S. Coast Guard manages a broad major acquisition portfolio. GAO has reported extensively on the Coast Guard's significant challenges with its major acquisition programs, including its Deepwater Program. GAO has also recognized steps the Coast Guard has taken to improve acquisition management. Additionally, GAO has recommended that the Coast Guard complete a review of the Deepwater Program to clarify the mix of assets that are needed to meet mission needs and trade-offs while considering fiscal constraints, because the program had exceeded its $24.2 billion baseline. This testimony updates (1) Coast Guard efforts to manage major acquisitions, (2) challenges programs are facing in the areas of cost and schedule, and (3) the status of the Deepwater fleet mix analysis. This statement is largely based on GAO-11-480, which is being issued today. In that report, GAO recommended that the Coast Guard formalize its database of agreements with the Department of Defense (DOD). The Department of Homeland Security agreed with the recommendation. This statement also draws from prior GAO reports and ongoing work related to Deepwater. GAO reviewed the first phase of the Coast Guard's fleet mix analysis, contract documents, and budget information. GAO also interviewed Coast Guard officials responsible for conducting the fleet mix analysis. For the new information, GAO obtained Coast Guard views and incorporated technical comments where appropriate"

Testimony issued by the Government Accountability Office with an abstract that begins "GAO's work over the past several years has highlighted long-standing, widespread, and significant problems with improper payments in the federal government. Fiscal year 2010 marked the 7th year of implementation of the Improper Payments Information Act of 2002 (IPIA). IPIA requires executive-branch agencies to identify programs and activities susceptible to significant improper payments, estimate annual amounts improperly paid, and report these estimates and actions taken to reduce them. On July 22, 2010, the Improper Payments Elimination and Recovery Act of 2010 (IPERA) was enacted. IPERA amended IPIA and expanded requirements for recovering overpayments across a broad range of federal programs. This testimony addresses (1) progress federal agencies have reported in estimating and reducing improper payments in fiscal year 2010, (2) challenges that continue to hinder full reporting of improper payment information, and (3) recent efforts by Congress and the executive branch intended to improve transparency and accountability for reporting, reducing, and recovering improper payments. This testimony is primarily based on prior GAO reports. GAO summarized available fiscal year 2010 improper payment information reported by federal executive-branch agencies and actions taken by the executive branch and Congress intended to improve transparency over, accountability for, and reduction of improper payments."

Testimony issued by the Government Accountability Office with an abstract that begins "This testimony discusses patient safety incidents at Department of Veterans Affairs (VA) medical centers and potential strategies to address the underlying causes of those incidents. VA operates one of the largest integrated health care delivery systems in the United States, providing care to over 5.5 million veterans annually. Organized into 21 Veterans Integrated Service Networks (VISN), VA's health care system includes 153 VA medical centers (VAMC) nationwide that offer a variety of outpatient, residential, and inpatient services. In providing health care services to veterans, clinicians at VAMCs use reusable medical equipment (RME), which is designed to be reused for multiple patients and includes such equipment as endoscopes and some surgical and dental instruments. Because RME is used when providing care to multiple veterans, this equipment must be reprocessed--that is, cleaned and disinfected or sterilized--between uses. VA has established requirements for VAMCs to follow when reprocessing RME, which are designed, in part, to help ensure the safety of the veterans who receive care at VAMCs. This testimony, based on our May 2011 report, which is being released today, examines issues related to veterans' safety, including (1) selected reprocessing requirements established in VA policies, based on their relevance to patient safety incidents and (2) VA's oversight of VAMCs' compliance with these selected requirements."

Testimony issued by the Government Accountability Office with an abstract that begins "By the end of this fiscal year--in less than one month--the U.S. Postal Service (USPS) projects that it will incur a $9 billion loss; reach its $15 billion borrowing limit; not make its $5.5 billion retiree health benefits payment; and thus, become insolvent. USPS recently summarized this situation as the equivalent of facing Chapter 11 bankruptcy. In August 2011, USPS outlined new proposals to address the crisis. USPS seeks legislation to remove itself from the federal health benefit program and sponsor its own program; change pension benefits for new employees; and eliminate the layoff provisions it negotiated with its unions in collective bargaining to accelerate its delivery, processing, and retail network and workforce downsizing. Other USPS proposals, such as moving to 5-day delivery, and pending legislation include additional options for consideration. This statement discusses (1) updated information on USPS's financial crisis and (2) GAO's review and analysis of proposals to address this crisis, including USPS's new proposals, and options in current legislation. The testimony is based primarily on GAO's review of pending legislation, past and ongoing work related to postal issues, as well as USPS's recent financial results and GAO's discussions with senior postal officials regarding USPS's recent proposals. GAO has reported that action by Congress and USPS is urgently needed to restore USPS's financial viability. GAO provided a draft statement to USPS for comments and did not receive any suggested changes."

Testimony issued by the Government Accountability Office with an abstract that begins "The F-35 Lightning II, also known as the Joint Strike Fighter (JSF), is the Department of Defense's (DOD) most costly and ambitious aircraft acquisition, seeking to simultaneously develop and field three aircraft variants for the Air Force, Navy, Marine Corps, and eight international partners. The JSF is critical for recapitalizing tactical air forces and will require a long-term commitment to very large annual funding outlays. The estimated total investment cost is currently about $385 billion to develop and procure 2,457 aircraft. Because of a history of relatively poor cost and schedule outcomes, defense leadership over the past year has directed a comprehensive restructuring of the JSF program that is continuing. This testimony draws substantially from our extensive body of work on the JSF, including the current annual review mandated in the National Defense Authorization Act for Fiscal Year 2010, Pub. L. No. 111-84 244 (2009). Our draft report is being reviewed by the Department and we expect to issue it early next month. That report and this testimony discusses (1) program cost and schedule changes and their implications on affordability; (2) progress made during 2010; (3) design and manufacturing maturity; and (4) test plans and progress. GAO's work included analyses of a wide range of program documents and interviews with defense and contractor officials."