TRUE Accountability Act
What changed between versions
The risk assessment requirement was expanded from two items to three. It now requires agencies to assess the likelihood and impact of inherent risks, identify risk tolerance, and assess the suitability of existing controls and prioritize residual risks - a more structured and comprehensive framework than the original single evaluation plus risk tolerance identification.
A new subsection (d) requires each covered agency to submit an after-action review within 180 days of initially obligating funds under any emergency supplemental appropriations measure. The review must assess control effectiveness, describe failures and gaps, summarize improper payments by program, explain recovery plans, and provide recommendations for future emergencies.
The Director is now required to incorporate after-action review findings into annual submissions to Congress, identifying common challenges, effective practices, and opportunities to improve internal controls across agencies. This creates a feedback loop from agency performance to legislative oversight.
Minor technical fixes: 'successor document' changed to 'successor documents' (plural), 'the head of each covered agency head' corrected to 'the head of each covered agency,' and rewording of paragraph (2)(B) from 'to include' to 'that shall include' for clarity.