protection plan, risk-management framework, and provisions state risk assessments should include fred fulmer ability and consequence assessments. recess until decisionsmakers identify and evaluate security risks and implement measures to mitigate that risk. instead of conducting risk assessments, interim vulnerability assessment tool referred to as modified infrastructure survey tool to assess federal facilities that develop longer-term solution. but it does not assess the consequence, the level duration of nature potential loss resulting from an undesirable event. reassessment efforts, a tool that does not make consequence does not allow an agency to fully assess its risks. xp as has eliminated knowledge of risks at 9,600 federal facilities around the country and officials stated they did not include consequence information because it was not part of the design. gao will issue a report on this issue early next year. in response to our recent report, they have agreed with recommendations in the 2012-2013 report on sp is contract guards and risk assessment processes. that concludes the openin