FEDE U.S. Government Accountability Office · Audits audits
What GAO Found The Federal Aviation Administration (FAA) has identified electromagnetic spectrum-related threats, including spoofing and jamming, to the National Airspace System (NAS) and international flight routes. However, FAA has not completed risk and mitigation assessments, and updated security documentation needed to address these threats. Additionally, FAA did not have a defined, real-time monitoring and detection capability for all spectrum-related threats. Without comprehensive risk and mitigation assessments, complete security documentation, and real-time monitoring capabilities, FAA may not have sufficient information to identify, prioritize, and respond to evolving spectrum-rel.
FEDE Office of the Federal Register / National Archives and Records Administration · Rulemaking audits
Defense Department | Notice | This serves as notice of the adoption of a STRL PDP plan and additional flexibilities by the DHA R&D, a DoD (referred to herein as "DoW") STRL. The DHA R&D is an STRL composed of medical research organizations that were formerly components of the U.S. Army Medical Research and Development Command (USAMRDC), a successor to the U.S. Army Medical Research and Materiel Command (USAMRMC). The DHA R&D will adopt the PDP plan of the USAMRDC at the Federal Register issue of March 3, 1998, with some modifications. In addition, the DHA R&D proposes to adopt certain personnel flexibilities available to all DoW STRLs.
FEDE U.S. Government Accountability Office · Audits audits
What GAO Found The 988 Suicide and Crisis Lifeline (988 Lifeline) is managed on behalf of the Department of Health and Human Services (HHS) by a network administrator who oversees the day-to-day operations and ensures that the nearly 220 local crisis contact centers are compliant with the organization’s cybersecurity requirements. HHS partially implemented oversight activities related to cybersecurity for the 988 Lifeline. Specifically, HHS defined oversight roles and responsibilities to monitor cybersecurity control implementation. However, HHS did not include all key HHS-defined cybersecurity control areas in the 988 Lifeline cooperative agreement with its network administrator or for the.
FEDE U.S. Government Accountability Office · Audits audits
What GAO Found The Export-Import Bank of the United States’ (EXIM) loan guarantee transactions are approved by EXIM’s Board of Directors, staff with individual delegated authority, or delegated authority lenders. The underwriting process for loan guarantee transactions approved by EXIM includes several steps, such as screening applications for completeness, reviewing for minimal eligibility requirements, and performing due diligence to assess transactions’ risks. Selected Underwriting Processes EXIM Performs for Loan Guarantees EXIM followed its underwriting guidelines but has not fully leveraged available data to identify participants with delinquent federal nontax debt. By law, a person o.
FEDE Office of the Federal Register / National Archives and Records Administration · Rulemaking audits
Personnel Management Office | Proposed Rule | OPM is reopening the public comment period for additional comments on OPM data and a new report published by a nongovernmental organization. OPM is releasing current data that is relevant to the proposed rule published on July 2, 2026, entitled "Promoting Employee Accountability." OPM is also interested in receiving public comment on a report published by We the Doers published on August 27, 2026. Accordingly, OPM is reopening the rulemaking for public comment specifically with respect to the proposed rule as informed by the newly released data and the report. The comment period for the proposed rule closed August 3, 2026; it is now reopened for.
FEDE U.S. Government Accountability Office · Audits audits
What GAO Found Under federal law, insurance plans offered in health insurance exchanges—known as qualified health plans (QHP)—may cover abortion services consistent with federal and state laws. Based on federal law applicable in 2026, QHPs are prohibited from using federal funds, such as income-based tax credits, to help pay for abortion services except where the pregnancy is the result of rape or incest, or the life of the pregnant woman would be endangered unless an abortion is performed. GAO refers to services that do not meet that exception as “non-excepted abortion services.” In 2026, federal data show 26 percent of QHPs (1,719 of 6,655) in the 50 states and District of Columbia covere.
FEDE U.S. Government Accountability Office · Audits audits
What GAO Found GAO’s review of payroll data found that federal agencies’ use of paid administrative leave increased by 435 percent from 2023 to 2025. GAO estimates federal agencies in our review spent $9.5 billion in salary costs on paid administrative leave in 2025, a sixfold increase from 2023. In 2025, the Office of Personnel Management (OPM) directed agencies to use paid administrative leave to support the deferred resignation program, which generally allowed federal employees to be placed on leave until they resigned or retired by September 30, 2025. Using program assumptions and internal time and attendance data provided by payroll service providers, GAO calculated about $6.7 billion..
FEDE U.S. Government Accountability Office · Audits audits
What GAO Found Federal buildings often contain special use spaces like meeting rooms and conference centers, some of which may be shared across agencies. Agencies varied in how they shared these spaces in the selected General Services Administration (GSA)-owned and -leased buildings GAO visited. Interviewees, including officials from federal tenant agencies in those selected buildings, said that sharing these spaces can provide benefits, including: access to useful spaces their agency might not otherwise have, reduced costs and more efficient use of space (e.g., agencies do not need to lease or construct individual spaces), and increased collaboration between agencies. However, interviewees.
FEDE U.S. Government Accountability Office · Audits audits
What GAO Found GAO found that the Federal Emergency Management Agency (FEMA) —a component within the Department of Homeland Security (DHS)— partially followed leading practices for risk assessment and information quality during the development, operation, and maintenance of the National Risk Index (NRI). The figure below lists these practices. FEMA took steps to define and disseminate information about the purpose and scope of the NRI and provided additional information on the methodologies and data used to inform the index. However, FEMA did not consider what information users (e.g., emergency managers) would need to tangibly apply NRI results when making decisions about how to reduce risk.
FEDE U.S. Government Accountability Office · Audits audits
What GAO Found Based on data provided by the military services, GAO found that the services’ use of intergovernmental support agreements (IGSA) with state, local, and tribal government entities (public partners) for installation-support services increased from 45 across all DOD installations in 2018 to 316 in 2025. Officials from DOD, the Army and Navy, and selected military installations said they intend to promote future IGSA use. However, military services’ estimates of cost savings did not reflect best practices for cost estimation, which raises questions about their completeness and reliability. Further, the military services’ guidance related to estimating costs and cost savings did n.
FEDE U.S. Government Accountability Office · Audits audits
What GAO Found The Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA) is the sector risk management agency (SRMA) for the U.S. chemical sector, responsible for implementing programs to assist facility owners and operators in identifying and mitigating security risks. In 2007, DHS established a regulatory program to mitigate security risks for high-risk chemical facilities. As part of this program, CISA required facilities to vet their personnel and certain unescorted visitors for terrorist ties against the U.S. government’s terrorist watchlist. Vetting against the U.S. terrorist watchlist is an inherently governmental function that the private se.
FEDE Office of the Federal Register / National Archives and Records Administration · Rulemaking audits
Federal Communications Commission | Proposed Rule | The Federal Communications Commission (Commission or FCC) issues a Notice of Proposed Rulemaking proposes to expand opportunities for direct-to-device (D2D) communications by permitting certain unlicensed devices to communicate with satellites on a non-interference basis. Building on recent market growth and new industry investment in D2D technologies, the NPRM explores adding satellite allocations in specific unlicensed bands, clarifying that equipment may operate within spacecraft, and establishing a flexible regulatory framework that preserves incumbent operations while enabling continued innovation. The Commission seeks comment on tech.
