We found in our most recent work that GSA has acted to ensure that its buildings have been assessed for security needs and to correct the data in its upgrade tracking system. In addition, we cited a similar study by GSA’s OIG that found that in 65, or 54 percent, of the buildings it reviewed, the status of the security upgrades in the buildings was not accurately reflected in the building security upgrade tracking system. And, we believe that, as a result, federal buildings are safer now than before the Oklahoma City bombing. Nevertheless, GSA still has not completely developed outcome-oriented performance goals and measures for its building security program. GSA’s goal is to implement the new risk assessment and survey policy by January 2000. Further, GSA now has better information on the status of the security upgrade program and is positioned to recoup more of its security program costs from federal agencies. Specifically, we were asked to determine the steps GSA has taken to (1) ensure completion of all building security evaluations, (2) correct the data in its building security upgrade tracking and accounting systems, (3) complete agreements with OMB regarding the funding of future security upgrades, (4) develop security program outcome-oriented goals and measures, and (5) complete review of its security risk assessment methodology and resume periodic building security inspections.
Why GAO Did This Study

Pursuant to a congressional request, GAO discussed the General Services Administration's (GSA) building security upgrade program.

What GAO Found

GAO noted that: (1) GSA directed its regions to reassess the security of all the buildings in its inventory by April 1, 1999, for two purposes: (a) to ensure that all of its buildings have been assessed and meet the Department of Justice minimum standards for security; and (b) to determine whether the security upgrade information for each building was correctly represented in both the upgrade tracking system and the accounting system; (2) GSA completed negotiations with the Office of Management and Budget and, as a result, has a means of recouping more of its building security costs; (3) GSA, however, still lacks completely accurate data in its upgrade tracking and accounting systems and has not completed development of outcome-oriented goals and measures for its building security program; (4) GSA decided on a new risk assessment methodology and is in the process of evaluating how to implement the methodology in future building security surveys; and (5) GSA's recent reassessment of each building was to mark the restart of the routine physical security surveys that were suspended because of a lack of sufficient personnel after the Oklahoma City bombing.