THE "G" OF ESG

GPRA and GPRAMA, for instance, mandate integrated budgeting, financial and performance measurement, strategic planning, annual performance plans with defined objectives and performance goals, as well as annual public performance reports. HHS is also working to integrate into its management approach strategic planning, performance measurement and management, enterprise risk management (ERM) and evaluation, as shown in Figure I.6 Components of Integrated Governance An integrated governance model, enabled by a data-driven strategy, AI and other technology, is the glue to achieve results and hold agencies accountable. [...]The Defense Business Board ... provides ... independent advice on business management issues ... to enhance the overall management and governance of the Department of Defense" (DOD).10 Govern internal controls according to cost-benefit, using ERM with fraud risk management (FRM). FMFIA requires annual agency head assurance statements on the adequacy of internal controls,11 pursuant to GAO's internal control standards and the Office of Management and Budget (OMB) implementation requirements.12 Agencies are to use ERM to assess the full spectrum of risks and their impacts "as an interrelated portfolio," and incorporate risk management and internal controls "into existing business activities as an integral part of managing an agency."