mr. dodaro and the gao employees to do a great job. with that i yield back. >> thank you. i will hold a record open for five legislative days when a member who would like to submit a written statement they would like to recognize our first witness. jean dodaro comptroller of the united states government comptroller office accompanied by a panel of experts and on behalf of both of us in his whole body we thank the thousands of men and women who served in the gao who work hard to create a work product and presented here today. we welcome all. pursuant to committee rules the chairman will be sworn in before he testifies and swear in the panel behind. if you could all rise, please. if you rise and please raise your right hand. do you solemnly swear or affirm the testimony you are about to give will be the truth the holster the nothing but the truth? thank you. let the record reflect all the witnesses answered in the affirmative. mr. dodaro have testified before to me several times so we will give you great latitude that we would appreciate you summarizing your comments and the

mr. dodaro's magic is that he got that kind of -- >> will now recognize the gentle woman from the virgin islands for five minutes. >> yes, thank you mr. chairman. good afternoon sir. >> good afternoon. >> i really wanted to thank you for all of the work that your agency does and to talk to you about the -- one of the primary things that you all do is uncovering waste and fraud and abuse and identification of the risk of integrity of the federal programs. we know, however that there is also best practices that your agency tries top identify, not only for the private -- for the public sector, but for the private as well. we understand now that the cyber attacks are not just on the federal agencies, but also on private. we know we've heard about home depot and the compromise of about 56 million companies and the credit card and debit card information, as well as anthem the nation's second-largest health insurance company with more than 80 million records that may have been compromised. i seen that one of your colleagues are coming over to assist you. >> he's our cyber expert. >> great. >> we

mr. dodaro is talking about, hopefully with the implementation of that bill we'll see real progress. it's something i hope we'll monitor. i know mr. meadows and i intend to do that in the subcommittee. thank you. >> the gentlemen yields back. we recognize the gentle lady from the district of columbia, ms. norton forks five minutes. >> my colleague asked about cost overruns. if people got fired for cost overruns, half the defense department would be fired. i'm very interested in this high-risk list because i've been obediently listening to this list for a long time. and i never knew much about how you get on it and how you get off it. so, i'd like to drill down a little about it, particularly considering that gao must look at what must be hundreds of thousands of agencies in order to draw its list. and i must say, whenever there's good news it seems to me this committee ought to be the first to note it but i did note that -- highlighted almost on your first page it says solid, steady progress. has been made in the vast majority of high-risk areas. i don't believe i've seen that kind of

mr. dodaro can be a testified before a committee several times. we times.at the great latitude here, but we would appreciate your summarizing your comment and your entire written day that will be obvious to me part of the record. you are not recognized. >> thank you, mr. chairman. adapter next year ranking member comments, all the members of the committee. i am pleased to be here today to discuss gao's latest high risk update. we do this with the beginning of each new congress to identify areas we believe our highest risk of fraud abuse, mismanagement and the federal government in need of broad-based transformation. our reports today looks that most of the 30 high-risk areas we've had since our last update in 2013. all of the areas we rate according to five criteria to get off the high risk list. you have to have leadership commitment top-level attention, capacity, resources and people with the right goes to fix the problem. you have to have a good corrective action plan that addresses root cause, a good monitor enough or within our milestones and offers to