Restricted Products

The following products have been determined to contain either classified information or controlled unclassified information by the audited agencies and cannot be publicly released. As such, they have not been posted to GAO's website and have product numbers that end in C (classified) or SU (controlled unclassified information).

This list is intended to keep Congress, federal agencies, and the public informed of the existence of these products. The list consists of all such classified or controlled products issued since September 30, 2014 and will be updated each time a new report is issued.

Members of Congress or congressional staff who wish to obtain one or more of these products should call or e-mail the Congressional Relations Office (202) 512-4400 or congrel@gao.gov.

All others who wish to obtain one or more of these products should follow the instructions found on Requesting Restricted Products.

Fiscal Year 2017

Federal Real Property: GSA Should Inform Tenant Agencies When Leasing High-Security Space from Foreign Owners
GAO-17-21SU: Published: Nov 30, 2016
Identity Theft and Tax Fraud: IRS Needs to Improve its Ability to Locate Fraudsters and Monitor Identity Theft Controls
GAO-17-46SU: Published: November 15, 2016
Combating Terrorism: Additional Steps Needed in U.S. Efforts to Counter ISIS Messaging
GAO-17-41C: Published: December 8, 2016
Combating Terrorism: U.S. Footprint Poses Challenges for the Advise and Assist Mission in Iraq
GAO-17-220C: Published: November 22, 2016
Navy Shipbuilding: Need to Document Rationale for the Use of Fixed-Price Incentive Contracts and Study Effectiveness of Added Incentives
GAO-17-219SU: Published: November 9, 2016
Federal Courthouses: Actions Needed to Enhance Capital Security Program and Address Collaboration Issues
GAO-17-6SU: Published: October 18, 2016

Fiscal Year 2016

Countering ISIS: DOD Should Develop Plans for Responding to Risks and for Using Stockpiled Equipment No Longer Intended for Syria Train and Equip Program
GAO-16-670C: Published: September 9, 2016
Iraq: State and DOD Need to Improve Documentation and Record Keeping for Vetting of Iraq’s Security Forces
GAO-16-658C: Published: September 30, 2016
Information Security: VA Needs to Improve Controls over Selected High-Impact Systems
GAO-16-691SU: Published: September 30, 2016
Border Security: CBP Programs to Prevent High Risk Travelers from Boarding U.S.-Bound Flights
GAO-16-646SU: Published: September 29, 2016
Information Security: NASA Needs to Improve Controls over Selected High-Impact Systems
GAO-16-688SU: Published: September 23, 2016
Diplomatic Security: State Should Enhance Management of Transportation-Related Risks to Overseas U.S. Personnel
GAO-16-615SU: Published: September 9, 2016
Information Security: NRC Needs to Improve Controls over Selected High-Impact Systems
GAO-16-689SU: Published: August 22, 2016
Air Force Training: Further Analysis and Planning Needed to Improve Effectiveness
GAO-16-635SU: Published: August 16, 2016
Information Security: OPM Needs to Improve Controls over Selected High-Impact Systems
GAO-16-687SU: Published: August 15, 2016
Arleigh Burke Destroyers: Classified Annex to GAO-16-613, Delaying Procurement of DDG 51 Flight III Ships Would Allow Time to Increase Design Knowledge
GAO-16-846C: Published: August 4, 2016
Management Report: Areas for Improvement in the Bureau of the Fiscal Service's Information Systems Controls
GAO-16-654RSU: Published: July 28, 2016
Countering Improvised Explosive Devices: Improved Planning Could Enhance Federal Coordination Efforts
GAO-16-581SU: Published: July 14, 2016
Force Structure: Better Information Needed to Support Air Force A-10 and Other Future Divestment Decisions
GAO-16-525C: Published: July 12, 2016
Information Security: FDA Needs to Rectify Control Weaknesses That Place Industry and Public Health Data at Risk
GAO-16-512SU: Published: June 30, 2016
Military Readiness: DOD's Readiness Rebuilding Efforts May Be at Risk without a Comprehensive Plan
GAO-16-534C: Published: June 30, 2016
Information Security: FDIC Implemented Controls Over Financial Systems, but Further Improvements Are Needed
GAO-16-604SU: Published: June 29, 2016
Federal Air Marshal Service: Additional Actions Needed to Ensure Air Marshals' Mission Readiness
GAO-16-535SU: Published: June 17, 2016
Distributed Common Ground System: Army is Applying Lessons Learned to Next Program Increment, but Needs to Conduct a Technology Assessment
GAO-16-558SU: Published: June 16, 2016
Syria: Train and Equip Program Servicemembers in Jordan Receive the Combat Zone Tax Exclusion Benefit while those in Turkey Do Not
GAO-16-311RC: Published: June 13, 2016
Regional Missile Defense: Agency’s Report Addressed Most Statutory Requirements, but Did Not Include Additional Relevant Information
GAO-16-540RC: Published: June 10, 2016
Low-Income Housing Tax Credit: Some Agency Practices Raise Concerns and IRS Could Improve Noncompliance Monitoring
GAO-16-421SU: Published: May 11, 2016
Management Report: Areas for Improvement in the Federal Reserve Banks’ Information Systems Controls
GAO-16-600RSU: Published: June 6, 2016
Nuclear Command, Control, and Communications: DOD Has Taken Steps to Address Sustainment and Maintenance Challenges for Critical Satellite Systems but Could Better Identify Risks and Mitigation Actions
GAO-16-370C: Published: May 26, 2016
Air Force: Service Faces Challenges to Rebuilding Readiness
GAO-16-482RC: Published: May 25, 2016
Army: Service Faces Challenges to Rebuilding Readiness
GAO-16-473RC: Published: May 25, 2016
Navy and Marine Corps: Services Face Challenges to Rebuilding Readiness
GAO-16-481RC: Published: May 25, 2016
Nuclear Weapons: DOD Assessed the Need for Each Leg of the Strategic Triad and Considered Other Reductions to Nuclear Forces
GAO-16-372C: Published: May 18, 2016
Defense Facility Condition: Revised Guidance Needed to Improve Oversight of Assessments and Ratings
GAO-16-369SU: Published: May 13, 2016
Defense Technologies: DOD Is Seeking Options to Secure Future Access to Leading-Edge Microelectronics
GAO-16-440RSU: Published: May 11, 2016
Aviation Security: TSA Should Ensure Testing Data Are Complete and Fully Used to Improve Screener Training and Operations
GAO-16-415SU: Published: May 4, 2016
Information Security: Opportunities Exist for SEC to Improve Its Controls over Financial Systems and Data
GAO-16-445SU: Published: April 28, 2016
Syria: DOD has Organized Forces to Execute the Syria Train and Equip Program but Faces Challenges in Fully Developing Personnel Requirements
GAO-16-292C: Published: April 1, 2016
Syria: Results of U.S. Efforts to Vet Recruits to Form a New Syrian Force to Counter ISIS
GAO-16-277C: Published: March 31, 2016
Aviation Security: Airport Perimeter and Access Control Security Would Benefit from Risk Assessment and Strategy Updates
GAO-16-318SU: Published: March 28, 2016
Information Security: IRS Needs to Further Improve Controls over Financial and Taxpayer Data
GAO-16-397SU: Published: March 28, 2016
Healthcare.gov: Actions Needed to Enhance Information Security and Privacy Controls
GAO-16-264SU: Published: March 23, 2016
Federal Air Marshal Service: Actions Needed to Better Incorporate Risk in Deployment Strategy
GAO-16-130C: Published: February 19, 2016
Security Assistance: U.S. Government Should Strengthen End-Use Monitoring and Human Rights Vetting for Egypt
GAO-16-244SU: Published: March 18, 2016
Defense Management: Additional Cost Information and Oversight Needed to Strengthen U.S. Position in Negotiating Host Nation Support
GAO-16-340C: Published: January 15, 2016
Information Security: DHS Needs to Enhance Capabilities, Improve Planning, and Support Greater Adoption of Its National Cybersecurity Protection System
GAO-16-43SU: Published: November 19, 2015
U.S. Secret Service: Data Analyses Could Better Inform the Domestic Field Office Structure
GAO-16-21SU: Published: November 18, 2015
Southeast Asia: Trends in U.S. and Chinese Economic Engagement in Indonesia and Vietnam
GAO-16-63SU: Published: October 29, 2015

Fiscal Year 2015

Kabul: Camp Sullivan Mishap Related to HESCO Security Barriers
GAO-15-708RSU: Published: September 28, 2015
Information Security: GAO Review of State-Based Marketplace Security and Privacy - 1
GAO-15-804RSU: Published: September 22, 2015
Information Security: GAO Review of State-Based Marketplace Security and Privacy - 2
GAO-15-805RSU: Published: September 22, 2015
Information Security: GAO Review of State-Based Marketplace Security and Privacy - 3
GAO-15-806RSU: Published: September 22, 2015
Nuclear Nonproliferation: DOE Made Progress to Secure Vulnerable Nuclear Materials Worldwide, but Opportunities Exist to Improve Its Efforts
GAO-15-501C: Published: August 3, 2015
Defense Infrastructure: Improvements in DOD Reporting and Cybersecurity Implementation Needed to Enhance Utility Resilience Planning
GAO-15-547SU: Published: July 23, 2015
Littoral Combat Ship: Knowledge of Survivability and Lethality Capabilities Needed Prior to Making Major Funding Decisions
GAO-15-361C: Published: July 7, 2015
Management Report: Improvement Needed in the Bureau of the Fiscal Service's Information Systems Controls
GAO-15-411RSU: Published: June 25, 2015
Military Readiness and Metrics
GAO-15-504RC: Published: June 23, 2015
Arctic Planning: DOD Expects to Play a Supporting Role to Other Federal Agencies and Has Efforts Under Way to Address Capability Needs and Update Plans
GAO-15-615C: Published: June 19, 2015
Force Structure: Preliminary Observations on Air Force A-10 Divestment
GAO-15-600RC: Published: June 19, 2015
Library of Congress: Information Security Review
GAO-15-575SU: Published: June 18, 2015
Diplomatic Security: State Department Should Better Manage Risks to Residences and Other Soft Targets Overseas
GAO-15-512SU: Published: June 18, 2015
U.S. Cyber Command: Actions Needed to Improve DOD's Management and Control of Cyberspace Operations
GAO-15-456C: Published: June 18, 2015
Iran Sanctions: Executive Branch Has Established Processes to Impose and Waive Sanctions on Financial Transactions Including Certain Purchases of Iranian Petroleum Products
GAO-15-682SU: Published: June 17, 2015
Iran Sanctions: Executive Branch Has Established Processes to Address Exceptions and Remittances Related to Purchases of Iranian Crude Oil
GAO-15-622C: Published: June 17, 2015
Combating Terrorism: Steps Taken to Mitigate Threats to Locally Hired Staff, but State Department Could Improve Reporting on Terrorist Threats
GAO-15-458SU: Published: June 17, 2015
Personnel Security Clearances: Funding Estimates and Government-Wide Metrics Are Needed to Implement Long-Standing Reform Efforts
GAO-15-179SU: Published: April 23, 2015
Insider Threats: DOD Should Strengthen Management and Guidance to Protect Classified Information Systems
GAO-15-357C: Published: April 22, 2015
Combating Terrorism: State Should Review How It Addresses Holds Placed During the Foreign Terrorist Organization Designation Process
GAO-15-439SU: Published: April 21, 2015
Regional Web Interaction Program: DOD Has Established Measures and Controls to Oversee U.S. Central Command's Program
GAO-15-383C: Published: April 16, 2015
Defense Technologies: Future DOD Access to Leading-Edge Microelectronics is Uncertain
GAO-15-422RSU: Published: April 15, 2015
Management Report: Areas for Improvement in Federal Reserve Bank’s Information Systems Controls
GAO-15-369RSU: Published: April 3, 2015
Prepositioned Stocks: Additional Information and a Consistent Definition Would Make the Annual Report More Useful
GAO-15-187C: Published: March 26, 2015
Information Security: IRS Needs to Continue Improving Controls over Financial and Taxpayer Data
GAO-15-336SU: Published: March 19, 2015
Confidential Informants: Updates to Policy and Additional Guidance Would Improve Oversight by DOJ and DHS Agencies
GAO-15-242SU: Published: March 5, 2015
Interagency Coordination: DoD and State Need to Clarify DoD roles and Responsibilities to Protect U.S. Personnel and Facilities Overseas in High-Threat Areas
GAO-15-219C: Published: March 4, 2015
Critical Infrastructure Protection: DHS and State Need to Improve Their Process for Identifying Foreign Dependencies
GAO-15-233C: Published: February 26, 2015
Intermediate-Range Nuclear Forces Treaty: State Informs Congress of Russian Compliance through Reports and Briefings
GAO-15-318RSU: Published: February 25, 2015
Homeland Security: Action Needed to Better Assess Cost Effectiveness of Security Enhancements at Federal Facilities
GAO-15-186SU: Published: February 24, 2015
Homeland Security: Actions Needed to Better Manage Security Screening at Federal Buildings and Courthouses
GAO-15-109SU: Published: January 30, 2015
Information Security: FAA Needs to Address Weaknesses in Air Traffic Control Systems
GAO-15-204SU: Published: January 29, 2015
Aviation Security: TSA Should Take Additional Actions to Obtain Stakeholder Input when Modifying the Prohibited Items List
GAO-15-135SU: Published: December 15, 2014
Triton Unmanned Aircraft System: Assessment of the Navy's Acquisition Strategy and Program Progress
GAO-15-99SU : Published: December 12, 2014
Nuclear Weapons: DOD Plan for Implementing Nuclear Reductions Generally Addresses Statutory Requirements but Lacks Some Detail
GAO-15-90RC: Published: December 11, 2014
Military Strategy: Improved Sequencing and Additional Details Could Enhance the Value of DOD's Reports to Congress
GAO-15-46C: Published: November 28, 2014
Information Security: James Madison Memorial Fellowship Foundation Needs to Address Program and Privacy Weaknesses
GAO-15-140SU: Published: November 20, 2014
Information Security: National Endowment for the Humanities Needs to Address Program and Privacy Weaknesses
GAO-15-139SU: Published: November 20, 2014
Information Security: National Capital Planning Commission Needs to Address Program and Privacy Weaknesses
GAO-15-138SU: Published: November 20, 2014
Information Security: Federal Retirement Thrift Investment Board Needs to Address Program and Privacy Weaknesses
GAO-15-137SU: Published: November 20, 2014
Information Security: International Boundary Commission, U.S. and Canada, Needs to Address Program and Privacy Weaknesses
GAO-15-136SU: Published: November 20, 2014
Information Security: Federal Trade Commission Needs to Address Program Weaknesses
GAO-15-76SU: Published: November 20, 2014
Supply Chain Security: CBP Needs To Enhance Its Guidance and Oversight of High-Risk Maritime Cargo Shipments
GAO-15-18SU: Published: November 13, 2014