Calendar Year 2020

The Department of Energy's Annual Report to Congress on Management and Operating Contractor Employees in the Washington, D.C. Area
The Department of Energy (Department) could not
or Restoration of ensure that it could continue operations or quickly restore
Essential Operations selected critical monitoring and control systems in the
event of an emergency. Specifically, management had not
fully assessed risks or taken adequate steps to mitigate the
foreseeable risks confronting the six critical monitoring and
control systems we reviewed.
Risk Assessments
Management had not fully assessed the risk and
cost-benefit of risk mitigation strategies for three of the six
systems we reviewed, including Argus which is a system
deployed at a number of sites to control access to facilities
that house critical information and nuclear materials. To
manage risk, the Federal Information Security
Management Act requires agencies to assess, mitigate, and
periodically reevaluate risks and security measures for all
major systems. Risk assessments enable management to
identify threats, vulnerabilities, and the likelihood of
adverse actions or potential consequences.
Energy Efficiency and Renewable Energy (EERE) project
officials were not always sufficiently involved in managing
projects funded by cooperative agreements with
commercial organizations. Our review of 20 project files
revealed that 12 were missing evidence that an initial
assessment of the feasibility of the technology had been
performed before the award was made, although this
assessment is specifically required by Federal regulation.
These reviews are important to the success of the project
and provide an independent and objective examination of
the technical feasibility of an award. In addition, we noted
that 14 project files contained no indication that site visits
to verify the status of the project were performed as
required after the award. As noted by the Department's
Guide to Financial Assistance, site visits help Federal
managers evaluate programmatic progress and financial
and business management aspects of the project, as well as
identify other issues that could affect the success of the
project.
The Ames Laboratory did not control royalty income
resulting from the successful commercialization of its
Revenues research. Rather, it relied on a third party entity to account
for and control its royalty revenues without any
independent verification of its status. Furthermore, Ames
did not use available funds to further its research,
technology transfer or education missions.