; and (B) is in its first four years of operation. ; and (2) in subsection (c)(1), by striking subsection (a)(1) and inserting in its place subsection (a)(1) or (a)(4) . 4. Anti-fraud report requirement Section 3357 of title 31, United States Code, is amended by striking subsection (d) and inserting the following: (d) Reports (1) In general For each fiscal year beginning in the first fiscal year after the date of the enactment of the Enhancing Improper Payment Accountability Act, each agency shall submit to Congress, in the report containing the annual financial statement of the agency, a report on the progress of the agency in— (A) implementing— (i) the financial and administrative controls required to be established under subsection (c); (ii) the fraud risk principles in the Standards for Internal Control in the Federal Government; and (iii) Office of Management and Budget Circular A–123 with respect to the leading practices for managing fraud risk; (B) identifying fraud risks and vulnerabilities, including with respect to payroll, beneficiary payments, grants, large contracts, and purchase and travel cards; and (C) establishing strategies, procedures, and other steps to curb fraud. (2) Additional requirements Any report under paragraph (1) shall include, as defined by the leading practices identified in the report published by the Government Accountability Office on July 28, 2015, titled Framework for Managing Fraud Risks in Federal Programs — (A) identification of— (i) any dedicated entity that leads the agency’s fraud risk management activities and its roles; (ii) responsibilities of such entity, including any program or operation for which that entity is responsible; (iii) capacity, including any limitations, to strategically manage fraud risks; and (iv) any program or operation for which there is not a dedicated entity that leads fraud risk management activities, along with a detailed justification for not having a dedicated entity