The CFO Act requires the agency’s CFO to develop and maintain an  integrated accounting and financial management system that provides for  complete, reliable, and timely financial information that facilitates the  systematic measurement of performance at the agency, the development  and reporting of cost information, and the integration of accounting and  budget information. The auditors reported 14 reportable conditions on internal control, 7 of  which were considered to be material weaknesses. DHS Inherited Significant Weaknesses from Its Component Agencies

When DHS was created in March 2003 and merged with 22 diverse  agencies, there were many known financial management weaknesses and  vulnerabilities in the inherited agencies. Further, of the four component agencies—Customs,  TSA, INS, and FEMA—that had previously been subject to stand-alone  audits, all four agencies’ systems were found not to be in substantial  compliance with the requirements of FFMIA. Some Progress Made in Addressing Inherited Weaknesses

DHS has made some progress in addressing the internal control  weaknesses it inherited from component agencies. Nine of the 30 internal  control weaknesses identified in prior component financial statement  audits have been closed as of September 30, 2003. The remaining 21 issues  represent continuing weaknesses that have been reported in DHS’s first  Performance and Accountability Report. The department’s independent auditors classified the remaining  7 weaknesses as lower level observations and recommendations. As mentioned  previously, several of the departmentwide weaknesses resulted from  combining previously identified weaknesses or reclassifying them, rather  than from resolving the underlying internal control weaknesses. DHS Is in the Early Stages of Integrating Its Financial Management Systems

DHS intends to acquire and deploy an integrated financial enterprise  solution and reports that it has reduced the number of its legacy financial  systems. It Is Not Known Whether DHS’s Planned Financial Management Systems Will Be Able to Meet the Requirements of Relevant Financial Management Improvement Laws

It is too early to tell whether DHS’s planned financial enterprise solution  will be able to meet the requirements of relevant financial management  improvement laws-–those currently applicable to DHS (such as FMFIA), as  well as some not applicable that are subject to pending legislation. DHS is  currently subject to most financial management improvement laws except  for the CFO Act and FFMIA. Scope and Methodology

To identify what were the existing weaknesses in the Department of  Homeland Security’s (DHS) component agencies’ financial management  systems, we reviewed relevant DHS Office of Inspector General (OIG)  reports and our January 2003 report on major management challenges at  DHS and looked at how such challenges are being addressed.
Why GAO Did This Study

When the Department of Homeland Security (DHS) began operations in March 2003, it faced the daunting task of bringing together 22 diverse agencies. This transformation poses significant management and leadership challenges, including integrating a myriad of redundant financial management systems and addressing the existing weaknesses in the inherited components, as well as newly identified weaknesses. This review was performed to (1) identify the financial management systems' weaknesses DHS inherited from the 22 component agencies, (2) assess DHS's progress in addressing those weaknesses, (3) identify plans DHS has to integrate its financial management systems, and (4) review whether the planned systems DHS is developing will meet the requirements of relevant financial management improvement laws.

What GAO Found

DHS inherited 30 reportable internal control weaknesses identified in prior component financial audits with 18 so severe they were considered material weaknesses. These weaknesses include insufficient internal controls, system security deficiencies, and incomplete policies and procedures necessary to complete basic financial information. Of the four inherited component agencies that had previously been subject to stand-alone audits, all four agencies' systems were found not to be in substantial compliance with the requirements of the Federal Financial Management Improvement Act (FFMIA), an indicator of whether a federal entity can produce reliable data for management and reporting purposes. Component agencies took varied actions to resolve 9 of the 30 inherited internal control weaknesses. The remaining 21 weaknesses were combined and reported as material weaknesses or reportable conditions in DHS's first Performance and Accountability Report, or were reclassified by independent auditors as lower-level observations and recommendations. Combining or reclassifying weaknesses does not resolve the underlying internal control weakness, or mean that challenges to address them are less than they would have been prior to the establishment of DHS. DHS is in the early stages of acquiring a financial enterprise solution to consolidate and integrate its business functions. Initiated in August 2003, DHS expects the financial enterprise solution to be fully deployed and operational in 2006 at an estimated cost of $146 million. Other agencies have failed in attempts to develop financial management systems with fewer diverse operations. Success will depend on a number of variables, including having an effective strategic management framework, sustained management oversight, and user acceptance of the efforts. It is too early to tell whether DHS's planned financial enterprise solution will be able to meet the requirements of relevant financial management improvement laws. As of June 2004, DHS is not subject to the CFO Act and thus FFMIA, which is applicable only to agencies subject to the CFO Act. While DHS is currently not required to report on compliance with FFMIA, its auditors disclosed systems deficiencies that would have likely resulted in noncompliance issues.