Managing federal real property and disposing of it when it isn't needed is a longstanding challenge that has been on our High Risk List since 2003. A 2016 law set up a process that tests ideas for speeding up sales of unneeded properties and covering sale costs.
Defense contractors are targets for hackers who are trying to access sensitive data. The Department of Defense is working on a framework to certify that contractors have proper cybersecurity practices in place to protect data. DOD worked with industry and experts on the framework.
The Department of Justice is responsible for collecting and publishing data on law enforcement's use of excessive force. It also may investigate cases and pursue penalties. In FYs 2016-2020, DOJ didn't consistently publish an annual summary of excessive force data as required by law.
The National Institutes of Health's duties include researching infectious diseases and administering over $30 billion a year in research grants. NIH uses IT systems containing sensitive data to carry out its mission. This report is a public version of our June 2021 report on NIH cybersecurity.