(a) Definition.—
In this section, the term “agency” has the meaning given the term in section 551 of title 5.
(b) Guidelines.—The guidelines required to be established under section 3(a) of the Fraud Reduction and Data Analytics Act of 2015, as in effect on the day before the date of enactment of this section—
(2)
may be periodically modified by the Director of the Office of Management and Budget, in consultation with the Comptroller General of the United States, as the Director and Comptroller General may determine necessary.
(c) Requirements for Controls.—The guidelines described in subsection (b) shall include—
(1)
conducting an evaluation of fraud risks and using a risk-based approach to design and implement financial and administrative control activities to mitigate identified fraud risks;
(d) Report.—For each of fiscal years 2019 and 2020, each agency shall submit to Congress, as part of the annual financial report of the agency, a report of the agency on—
(1) implementing—
(2)
identifying risks and vulnerabilities to fraud, including with respect to payroll, beneficiary payments, grants, large contracts, and purchase and travel cards; and