About | HeinOnline Law Journal Library | HeinOnline Law Journal Library | HeinOnline

GAO-24-107316 1 (2024-05-30)

handle is hein.gao/gaoqdk0001 and id is 1 raw text is: U.S. GOVERNMENT ACCOUNTABILITY OFFICE
441 G St. N.W.                                                       Comptroller General
Washington, DC 20548                                                  of the United States
May 30, 2024
The Honorable Robin Carnahan
Administrator
General Services Administration
1800 F Street, NW
Washington, D.C. 20405
Priority Open Recommendations: General Services Administration
Dear Administrator Carnahan:
The purpose of this letter is to provide an update on the overall status of the General Services
Administration's (GSA) implementation of GAO's recommendations and to call your continued
personal attention to areas where open recommendations should be given high priority.1 In
November 2023, we reported that on a government-wide basis, 75 percent of our
recommendations made 4 years ago were implemented.2 GSA's recommendation
implementation rate was 100 percent.3 As of April 2024, GSA had 27 open recommendations.
Fully implementing these open recommendations could significantly improve agency operations.
Since our May 2023 letter, GSA has implemented two of our six open priority recommendations.
Specifically:
GSA implemented one recommendation by updating its guide on cybersecurity risk in
June 2023.4 The guide defines the GSA cybersecurity risk management process. Among
other things, the guide defines and documents the roles of the senior agency official for
privacy and other privacy officials in key authorization steps. These steps include system
categorization, control assessments, and authorization decisions. As a result of these
1Priority recommendations are those that GAO believes warrant priority attention from heads of key departments or
agencies. They are highlighted because, upon implementation, they may significantly improve government
operations, for example, by realizing large dollar savings; eliminating mismanagement, fraud, and abuse; or making
progress toward addressing a high-risk or duplication issue.
2GAO, Performance and Accountability Report: Fiscal Year 2023, GAO-24-900483 (Washington, D.C.: Nov. 15,
2023).
3The implementation rates identified in our 2020, 2021, 2022, and 2023 priority recommendation letters were 100
percent, 81 percent, 97 percent, and 100 percent, respectively. GAO, Priority Open Recommendations: General
Services Administration, GAO-20-533PR (Washington, D.C.: May 6, 2020); Priority Open Recommendations:
General Services Administration, GAO-21-495PR (Washington, D.C.: May 19, 2021); Priority Open
Recommendations: General Services Administration, GAO-22-105718 (Washington, D.C.: June 2, 2022); and Priority
Open Recommendations: General Services Administration, GAO-23-106474 (Washington, D.C.: May 11, 2023).
4GAO, Privacy: Dedicated Leadership Can Improve Programs and Address Challenges, GAO-22-105065
(Washington, D.C.: Sept. 22, 2022).

GAO-24-107316 GSA Priority Recommendations

Page 1

What Is HeinOnline?

HeinOnline is a subscription-based resource containing thousands of academic and legal journals from inception; complete coverage of government documents such as U.S. Statutes at Large, U.S. Code, Federal Register, Code of Federal Regulations, U.S. Reports, and much more. Documents are image-based, fully searchable PDFs with the authority of print combined with the accessibility of a user-friendly and powerful database. For more information, request a quote or trial for your organization below.



Contact us for annual subscription options:

Already a HeinOnline Subscriber?

profiles profiles most