Report that provides links to selected authoritative resources related to cybersecurity issues, including: legislation, hearings in the 112th Congress, data and statistics, and cybersecurity glossaries.

Report that provides information on the levels of deficit reduction if the Budget Control Act's (BCA) automatic cuts are implemented as under current law and contrasts that with the alternative proposals offered by some Members of Congress and President Obama. It also discusses specific determinations made by the Office of Management and Budget regarding the exempt/non-exempt status of certain programs, as well as a discussion of information to be disclosed regarding the FY2013 BCA sequester impact.

Other written product issued by the Government Accountability Office with an abstract that begins "The Government Accountability Office (GAO) and the U.S. Department of Agriculture’s Office of Inspector General (OIG) seek to enhance the efficiency, effectiveness, and accountability of the federal government. As Congress debates ways to address the federal government’s long-term fiscal imbalance, it becomes even more critical that we help with this challenge by identifying opportunities for cost-savings and for improving programs to ensure that every dollar counts."

Correspondence issued by the Government Accountability Office with an abstract that begins "Through its policy and guidance, VHA has outlined processes that enable VAMCs to respond to reported adverse events that occur. VHA generally grants individual VAMCs discretion on choosing which process to use. Specifically, VAMCs conduct an initial review to determine how best to respond to an adverse event. According to VHA officials, if the circumstances that led to an adverse event are clear, based on a VAMC's initial review, VAMCs can take immediate corrective action. If the circumstances that led to an adverse event need to be examined further, VAMCs are given discretion to use one or more of the following four processes: (1) root cause analysis, (2) peer review, (3) clinical care review, and (4) administrative investigation board. Because VAMCs generally have discretion in which of these processes they use, different VAMCs that experience similar adverse events may not use the same processes to respond to them. Nonetheless, each process has certain purposes and limitations. For example, some of these processes may be used to examine a clinician's actions as they relate to an adverse event, while others may be used to examine whether a systems or …

A letter report issued by the Government Accountability Office with an abstract that begins "A majority of the initiatives GAO reviewed (26 of 30) met, or expected to meet, the Department of Defense’s (DOD) expectation for fielding a capability in response to joint urgent operational needs within 2 years. However, performance in meeting schedule estimates varied, and more than half of the initiatives experienced schedule delays."

Correspondence issued by the Government Accountability Office with an abstract that begins "Since the fall of 2010, State has sanctioned 13 foreign firms under the ISA—2 for investments in Iran’s energy sector and 11 for supplying refined petroleum products."

Testimony issued by the Government Accountability Office with an abstract that begins "The Department of Defense (DOD) and the North Atlantic Treaty Organization (NATO) report progress developing capable Afghan National Security Forces (ANSF), but tools used to assess the performance of ANSF units have changed several times. In April 2012, DOD reported progress increasing the number and capability of ANSF, with 7 percent of army units and 9 percent of police units rated at the highest level of capability. GAO has previously found the tools used by DOD and NATO to assess ANSF reliable enough to support broad statements regarding capability. However, issues related to these tools exist. When GAO reported on ANA capability in January 2011, the highest capability rating level was “independent”—meaning that a unit was capable of executing the full spectrum of its missions without assistance from coalition forces. As of August 2011, the highest level had changed to “independent with advisors”—meaning that a unit was capable of executing its mission and can call for coalition forces when necessary. DOD reports, these changes, as well as the elimination of certain requirements for validating units, were partly responsible for the increase in ANSF units rated at the highest …

Testimony issued by the Government Accountability Office with an abstract that begins "GAO’s preliminary results indicate that the Department of Homeland Security’s (DHS) Federal Protective Service (FPS) is not assessing risks at federal facilities in a manner consistent with standards such as the National Infrastructure Protection Plan’s (NIPP) risk management framework, as FPS originally planned. Instead of conducting risk assessments, since September 2011, FPS’s inspectors have collected information, such as the location, purpose, agency contacts, and current countermeasures (e.g., perimeter security, access controls, and closed-circuit television systems). This information notwithstanding, FPS has a backlog of federal facilities that have not been ssessed for several years. According to FPS’s data, more than 5,000 facilities were to be assessed in fiscal years 2010 through 2012. However, GAO was not able to determine the extent of FPS’s facility security assessment (FSA) backlog because the data were unreliable. Multiple agencies have expended resources to conduct risk assessments, even though they also already pay FPS for this service."

Correspondence issued by the Government Accountability Office with an abstract that begins "The cost effectiveness of the alternative training approach depends on several cost elements that are currently unknown, such as the up-front costs to develop the new controller training curriculum for CTI schools and the duration of the new orientation session at the Academy. However, some direct cost savings to FAA are possible and may be realized under the alternative training approach. These savings include avoiding the cost of pay (salary and per diem) for Academy trainees and not incurring the cost of providing Academy courses for each assigned air traffic control specialization. However, any cost savings could be offset by a number of additional costs that FAA could incur related to the alternative training approach; because some of these costs are unknown at this time, it is unclear whether the alternative approach would be more cost effective. These additional costs would depend primarily on how FAA implements the new training. Also unknown are recurring costs for any additional evaluations FAA would have to undertake to check the accreditation status of CTI schools and to assess graduates' proficiency in the initial specialization coursework. The cost of the mandate's proposed …

Testimony issued by the Government Accountability Office with an abstract that begins "The nation faces an evolving array of cyber-based threats arising from a variety of sources. These threats can be intentional or unintentional. Unintentional threats can be caused by software upgrades or defective equipment that inadvertently disrupt systems, and intentional threats can be both targeted and untargeted attacks from a variety of threat sources. Sources of threats include criminal groups, hackers, terrorists, organization insiders, and foreign nations engaged in crime, political activism, or espionage and information warfare. These threat sources vary in terms of the capabilities of the actors, their willingness to act, and their motives, which can include monetary gain or political advantage, among others. Moreover, potential threat actors have a variety of attack techniques at their disposal, which can adversely affect computers, software, a network, an organization’s operation, an industry, or the Internet itself. The nature of cyber attacks can vastly enhance their reach and impact due to the fact that attackers do not need to be physically close to their victims and can more easily remain anonymous, among other things. The magnitude of the threat is compounded by the ever-increasing sophistication of cyber attack techniques, such …

Testimony issued by the Government Accountability Office with an abstract that begins "In summary, we reported that ICE does not have a process to identify and assess risks posed by schools in SEVP. Specifically, SEVP (1) does not evaluate program data on prior and suspected instances of school fraud and noncompliance, and (2) does not obtain and assess information from CTCEU and ICE field office school investigations and outreach events. Moreover, weaknesses in ICE’s monitoring and oversight of SEVP-certified schools contribute to security and fraud vulnerabilities. For example, ICE has not consistently implemented internal control procedures for SEVP in the initial verification of evidence submitted in lieu of accreditation. In addition, ICE has not consistently followed the standard operating procedures that govern the communication and coordination process among SEVP, CTCEU, and ICE field offices. We recommended that ICE, among other things, identify and assess risks posed by schools in SEVP. Specifically, SEVP (1) does not evaluate program data on prior and suspected instances of school fraud and noncompliance, and (2) does not obtain and assess information from CTCEU and ICE field office school investigations and outreach events. Moreover, weaknesses in ICE’s monitoring and oversight of SEVP-certified schools contribute to security …

Testimony issued by the Government Accountability Office with an abstract that begins "The Centers for Medicare & Medicaid Services (CMS)—the agency that administers Medicare—has made progress in implementing several key strategies GAO identified in prior work as helpful in protecting Medicare from fraud; however, some actions that could help combat fraud remain incomplete."

A letter report issued by the Government Accountability Office with an abstract that begins "Key standards for manufactured homes provide a lower margin of safety against a carbon monoxide exposure incident than those for site-built homes, which are constructed at their permanent locations. For instance, the Department of Housing and Urban Development (HUD) Code requires a minimum 3-foot separation between air intakes and exhaust vents, while industry standards for site-built homes have required a greater distance for many years. The industry standards call for a greater separation between air intakes and exhaust vents to help reduce the risk that contaminants such as carbon monoxide will re-enter the home. Indoor air quality experts whom GAO interviewed stated that the exhaust of an improperly operating furnace combined with unique wind conditions could, in rare cases, present a risk of carbon monoxide exposure. GAO analysis shows that increasing the separation between an air intake and exhaust vents, using industry standards, can significantly dilute concentrations of contaminants."

Testimony issued by the Government Accountability Office with an abstract that begins "As discussed in our report, OMB and key federal agencies have made progress on selected action items identified in the IT Reform Plan, but there are several areas where more remains to be done. Of the 10 key action items we reviewed, 3 were completed and the other 7 were partially completed by December 2011. The action items that are behind schedule share a common reason for the delays: the complexity of the initiatives. In all seven of the cases, OMB and the federal agencies are still working on the initiatives. However, OMB and federal agencies have established time frames for completing only two of these initiatives."

Correspondence issued by the Government Accountability Office with an abstract that begins "Science establishes research priorities within and across its six core interdisciplinary research programs, which include a wide variety of research ranging from biology to particle physics. However, Science does not explicitly rank these programs in terms of priority. The office currently prioritizes research that aligns with the Secretary of Energy’s interest in fostering the development of clean energy technologies. For example, Science supports research in materials sciences, which informs technology development of batteries and fuels cells. According to Science’s Deputy Director for Science Programs, the office remains committed to all of its research programs and, in the case of stable or declining budgets, does not intend to limit funding reductions to certain programs. Science formalizes priorities annually through the budget formulation process."

A letter report issued by the Government Accountability Office with an abstract that begins "After studying the Joint Capabilities Integration and Development System (JCIDS) process since September 2010, the Joint Staff began initiating actions in October 2011 to better prioritize capability needs and align those needs with available budgetary resources. Specifically, according to Joint Staff officials, the Joint Requirements Oversight Council (JROC) has begun to consider the benefits and affordability of new capabilities within the context of joint capability areas and to evaluate possible duplication before validating new capability requirements. The Joint Staff has begun to implement a new approach to support JROC prioritization of capability needs, but the new approach is still evolving and has not been fully developed and clearly documented. New guidance does not clearly outline goals of the new approach, develop and communicate the analytic approach envisioned to support JROC decision making, or set out criteria and accompanying measures of progress. GAO previously reported that JCIDS’s ability to prioritize needs could be improved if it had an analytic approach to reviewing and validating proposals that would help ensure that the most important capability needs of the department are addressed. Until the Joint Staff takes steps to …

Correspondence issued by the Government Accountability Office with an abstract that begins "In 2005, the most recent year for which complete data were available, occupants of older manufactured homes paid over twice as much on average per square foot for energy---$1.75 per square foot as compared with $0.87---as was paid by occupants of detached homes. Annual energy expenditures for older manufactured homes--about 906 square feet on average--were about $1,369, compared with detached homes--about 2,919 square feet on average--were about $2,060. Energy expenditures--both per square foot and annually--varied significantly by region reflecting regional differences in the types and costs of fuels commonly used to heat and cool homes, income levels, and climate, among other things. In 2005, LIHEAP provided more assistance on a per square foot basis--about $0.33 per square foot--to occupants of older manufactured homes than to those of detached homes--about $0.20 per square foot. However, this assistance covers slightly less of the annual energy expenditures of occupants of older manufactured homes than occupants of detached homes--15 and 17 percent, respectively. Based on our analysis of EIA's RECS data, we estimate that about 3 percent of LIHEAP funds--about $57 million--spent in 2005 were used to assist occupants of older manufactured …

Correspondence issued by the Government Accountability Office with an abstract that begins "Iran’s involvement in illicit nuclear activities, support for terrorism, and abuse of human rights has led the United States, as well as other nations, to impose sanctions in an attempt to curb these activities. According to the Department of State (State), the sanctions are intended to, among other things, target sectors of the Iranian economy that are relevant to Iran’s proliferation activities and block the transfer of weapons and technology related to Iran’s missile and nuclear programs. One of the measures enacted by the United States, intended to limit resources available for proliferation and support for terrorism, imposes sanctions on firms that sell refined petroleum products to Iran."

Correspondence issued by the Government Accountability Office with an abstract that begins "During our fiscal year 2011 audit, we identified eight new general information systems control deficiencies related to access controls, configuration management, and segregation of duties. We made nine recommendations to address these control deficiencies. In a separately issued Limited Official Use Only report, we communicated to BPD management detailed information regarding our findings and related recommendations."

A letter report issued by the Government Accountability Office with an abstract that begins "Plan sponsors and participants paid a range of fees for services, though smaller plans typically paid higher fees as a percentage of plan assets. For example, the average amount sponsors of small plans reported paying for recordkeeping and administrative services was 1.33 percent of assets annually, compared with 0.15 percent paid by sponsors of large plans. Larger plans were more likely to pass recordkeeping fees along to participants, but when fees were passed along to participants in small plans, those in large plans paid lower fees than those in small plans. Participants also paid for investment and plan consulting fees—through fees deducted from their plan assets—in more instances than sponsors."

A letter report issued by the Government Accountability Office with an abstract that begins "The Office of Management and Budget (OMB), agencies, and interagency statistical committees have distinct roles in identifying opportunities to improve federal information collection efforts. OMB exercises several authorities that promote the system’s efficiency, including overseeing and approving agency information collections. The website Reginfo.gov provides the public with information, such as cost and burden, on collections that OMB reviews, though GAO’s review identified some discrepancies in selected items. OMB periodically issues guidance to agencies on complying with federal requirements for information collections, but this guidance generally does not prescribe specific actions to take. GAO’s analysis of agencies’ documentation of active surveys indicated that 77 percent included detailed descriptions of efforts to identify duplication, while those that did not tended to be for collections that are unlikely to duplicate existing information; and 75 percent reported actions beyond those required by statute to solicit external input. OMB, through enhanced guidance, could promote additional awareness of options agencies can take to identify duplication and solicit input. Interagency committees, which primarily draw members from the 13 agencies that have statistics as their primary focus, are particularly important in helping ensure collaboration. …

A letter report issued by the Government Accountability Office with an abstract that begins "Scientific research to date has not demonstrated adverse human health effects of exposure to radio-frequency (RF) energy from mobile phone use, but research is ongoing that may increase understanding of any possible effects. In addition, officials from the Food and Drug Administration (FDA) and the National Institutes of Health (NIH) as well as experts GAO interviewed have reached similar conclusions about the scientific research. Ongoing research examining the health effects of RF energy exposure is funded and supported by federal agencies, international organizations, and the mobile phone industry. NIH is the only federal agency GAO interviewed directly funding studies in this area, but other agencies support research under way by collaborating with NIH or other organizations to conduct studies and identify areas for additional research."

Correspondence issued by the Government Accountability Office with an abstract that begins "DOD officials are seeking to approach strategic communication as a process that leaders, planners, and operators should follow to integrate foreign audience perceptions into policy making, planning, and operations at every level. However, descriptions of strategic communication in several key documents—including the Quadrennial Defense Review and the National Framework for Strategic Communication—characterize it differently. For example, the Quadrennial Defense Review describes strategic communication as the coordination of activities such as information operations and public affairs, among other things. According to DOD officials, these varying descriptions of strategic communication have created confusion within the department. To address this confusion, DOD is drafting an instruction to clarify the steps of the strategic communication process, which DOD officials expect to be completed in late spring or early summer 2012."

A letter report issued by the Government Accountability Office with an abstract that begins "In-country, the U.S. Agency for International Development (USAID) and its implementing partners face a range of factors that, to varying degrees, affect their ability to target food assistance effectively to vulnerable groups. These factors include (1) the quality of data used to identify and reach recipients, (2) host government policies, and (3) sharing of rations among recipients and community members. Targeting effectiveness is reduced when data quality is poor, host government policies cause distortions in program design and implementation, and sharing prevents food rations from being consumed by the intended recipients in the intended amounts. USAID and its implementing partners try to mitigate such challenges by, for example, employing technology to improve data quality, coordinating closely with government officials to foster better relationships, and educating recipients about proper food usage to reduce sharing. In some cases, host governments have facilitated targeting efforts by, for example, establishing national targeting guidelines that set a common standard, or national statistical offices that assist in collecting data. Nevertheless, ensuring that food assistance reaches intended recipients remains difficult."