to direct the roles and data visibility Administration-wide. (C) Developing initiatives to improve Administration-wide visibility. (D) Identifying and reducing unnecessary duplication to incident monitoring, detection, and response capabilities. (c) GAO priority recommendations Not later than 18 months after the date of enactment of this Act, the Administrator shall implement the priority recommendations of the Comptroller General of the United States in the report issued May 18, 2016 (GAO–16–501), pertaining to information security controls over select high-impact systems, including— (1) re-evaluating security control assessments