About | HeinOnline Law Journal Library | HeinOnline Law Journal Library | HeinOnline

GAO-25-107743 1 (2025-06-26)

handle is hein.gao/cfimnoffrop0001 and id is 1 raw text is: 




GAOUS. GOVERNMENT ACCOUNTABILITY OFFICE

441 G St. NW
Washington, DC 20548


June 26, 2025

Mr. Scott Flanders
Chief Information Officer
U.S. Nuclear Regulatory Commission
Washington, DC  20555-0001

Chief Information Officer Open Recommendations: Nuclear Regulatory Commission

Dear Mr. Flanders:

I am writing to you with respect to your role as the Chief Information Officer (CIO) for the
Nuclear Regulatory Commission  (NRC). As an independent, non-partisan agency that works for
Congress, GAO's  mission is to support Congress in meeting its constitutional
responsibilities and help improve the performance and ensure  the accountability of the
federal government. Our work includes investigating matters related to the use of public funds,
evaluating programs and activities of the U.S. Government at the request of congressional
committees and subcommittees  or on the initiative of the Comptroller General, and as required
by public laws or committee reports. Our duties include reporting our findings and
recommending  ways  to increase economy and efficiency in government spending. The purpose
of this letter is to provide an overview of the open, publicly available GAO recommendations to
NRC  that call for the attention of the CIO.

We  identified recommendations that relate to the CIO's roles and responsibilities in effectively
managing  IT. They include strategic planning, investment management, and information
security. We have previously reported on the significance of the CIO's role in improving the
government's performance  in IT and related information management functions.1 Your attention
to these recommendations will help ensure the secure and effective use of IT at the agency.

Currently, NRC has six open recommendations that call for the attention of the CIO. Each of
these recommendations  relates to a GAO High-Risk area: (1) Ensuring the Cybersecurity of the
Nation or (2) Improving IT Acquisitions and Management.2 Fully implementing these open
recommendations  could significantly improve NRC's ability to deter threats and manage its
critical systems, operations, and information. I have summarized selected recommendations
here. See the enclosure for a full list, and additional details on the recommendations.





1See for example, GAO, Federal Chief Information Officers: Critical Actions Needed to Address Shortcomings and
Challenges in Implementing Responsibilities, GAO-18-93 (Washington, D.C.: Aug. 2, 2018).
2GAO, High-Risk Series: Heightened Attention Could Save Billions More and Improve Government Efficiency and
Effectiveness, GAO-25-107743 (Washington, D.C.: Feb. 25, 2025).


GAO-25-108462 NRC  CIO Recommendations


Page 1

What Is HeinOnline?

HeinOnline is a subscription-based resource containing thousands of academic and legal journals from inception; complete coverage of government documents such as U.S. Statutes at Large, U.S. Code, Federal Register, Code of Federal Regulations, U.S. Reports, and much more. Documents are image-based, fully searchable PDFs with the authority of print combined with the accessibility of a user-friendly and powerful database. For more information, request a quote or trial for your organization below.



Contact us for annual subscription options:

Already a HeinOnline Subscriber?

profiles profiles most