In our June 2017 report, we found that FirstNet has conducted key efforts to establish the network, namely releasing the request for proposal for the network in January 2016 and awarding the network contract to AT&T in March 2017. As the contractor, AT&T will be responsible for the overall design, development, production, operation, and evolution of the network, as well as the marketing, product management, sales, distribution, and customer care. Further, we found that FirstNet has established a framework to meet the financial requirements established in the 2012 Act, as depicted in figure 1. This framework focuses on leveraging FirstNet’s spectrum through the use of payments and fees with the aim of ensuring that the network is financially sustainable over the life of the contract and that FirstNet sustains self-funding operations. By establishing a single, dedicated network for public safety use, FirstNet’s network is expected to foster greater interoperability and meet public safety officials’ reliability and other needs. However, the actual use (or “adoption”) of the network by public safety users will be voluntary. Thus, even with the establishment of this framework, substantial unknowns remain regarding how many public safety users will adopt the network, the extent to which AT&T will be successful in monetizing the spectrum to retain revenue from commercial users, and the extent to which this revenue will be sufficient or appropriate in relation to the capital needed to build, operate, and maintain the network. Therefore, we noted that, at the time of our report, we could not assess the viability of this framework and whether FirstNet’s structures for overseeing the contractor’s use of the spectrum for commercial users will be appropriate. We also found that FirstNet has made progress consulting with state and local, federal, and tribal stakeholders through a variety of mechanisms. State officials we contacted were generally satisfied with FirstNet’s efforts to engage them. However, tribal stakeholders we contacted expressed concern with FirstNet’s efforts to consult with tribes per the 2012 Act’s requirements. In particular, four of the five tribal organizations we contacted said that FirstNet has not fully engaged in effective communication or has relied on state points of contact too much as opposed to engaging directly with tribes; the other tribal organization was not aware of FirstNet or its mission at all. Further, tribes noted that individuals with first-hand knowledge of tribes’ experiences are not able to represent tribal views directly among FirstNet’s key decision makers. FirstNet has stated that, indeed, the 2012 Act requires that it consult with tribes through state points of contact. Nevertheless, several federal agencies have identified seeking a full understanding of tribal concerns— and reaching consensus where possible—as a key principle of effective tribal communication, noting that agencies should adapt to changing circumstances, contemplate creative problem solving, identify options for addressing concerns, and exhaust alternatives to achieve mutually agreeable solutions. We concluded that, by fully exploring and proposing actions to address tribal stakeholders’ concerns, FirstNet could help improve its relations with tribes and better meet stakeholders’ needs. As such, we recommended in our report that FirstNet fully explore tribal concerns and propose actions, as needed, to address those concerns. FirstNet agreed with this recommendation and, in September 2017, described to us the actions it has taken to implement it. For example, according to FirstNet, in September 2017 it began a process to formally explore the tribal outreach concerns raised in our report and expects to propose improvements by the end of this year. FirstNet has also said that it adopted an organization-wide tribal consultation policy which it expects to take effect towards the end of this year. If implemented as planned, these actions should address the intent of the recommendation. In our report, we found that—according to stakeholders we contacted— FirstNet faces various challenges to ensure the network’s reliability, security, and interoperability. For example, stakeholders raised concerns related to: providing network coverage to rural areas, in buildings, or ensuring the network’s overall resiliency and cybersecurity; and managing frameworks for user identity, credentialing of users, access management, and prioritization of users on the network. However, we also found that both FirstNet and the PSCR have begun research and other efforts to help ensure the reliability, security, and interoperability of the network and address the challenges raised by stakeholders. For example, in November 2016, FirstNet opened an Innovation and Test Lab at its technical headquarters in Boulder, Colorado. According to FirstNet documentation, FirstNet plans to use— and allow AT&T to use—the lab to test public safety devices and applications before deploying them on the network. Additionally, the PSCR has conducted research on behalf of FirstNet and, using $300 million in funds provided to NIST by the 2012 Act, is also planning for and implementing other research activities to support FirstNet. For instance, in January 2016, PSCR launched its Public Safety Innovation Accelerator Program to support these research activities, and in December 2016, NIST issued a funding announcement to fund research in several areas. At the time of our report, we found that PSCR’s research process generally aligned with key phases of sound research programs identified by leading national organizations, including the American Evaluation Association and the National Academy of Sciences. For example, PSCR has established a structured process for developing research priorities that includes both internal and external stakeholders, and has identified criteria it uses to help it select the research areas to fund and procedures to help it guide and monitor its research. Similarly, FirstNet has determined its research priorities to date based on its network- planning needs and in consultation with internal and external stakeholders, and worked with the PSCR to define criteria to help it select research areas. Further, we found that the majority of stakeholders we contacted were satisfied with the planning efforts to ensure the reliability, security, and interoperability of the network. However, many stakeholders also said that there is much remaining uncertainty about how this will be implemented in practice. Additionally, one public safety official we contacted told us that FirstNet and its contractor will have to balance the costs associated with implementing features that make the network reliable and secure with the need to establish compelling and competitively priced service packages and fees that will encourage user adoption of the network. Indeed, numerous stakeholders we contacted cited the cost of subscribing to the network as a key factor affecting user adoption, noting that the pricing must be comparable to what they pay for commercial service now, that budgets are constrained in the public safety community, or that local governments do not want costs to increase. Further, commercial carriers could choose to compete with FirstNet. FirstNet has stated that it expects AT&T to provide services at a competitive price and deliver affordable, high-quality services that will encourage public safety users to adopt the network. Ultimately—because the network must be self-funding and FirstNet has stated that revenue from network users will be critical to this funding—the success of the network depends on whether FirstNet and AT&T generate enough revenue to operate it over the long term and whether public safety users adopt it, no matter how reliable and secure it is. FirstNet must manage and oversee the implementation of the network contract to build, operate, and maintain the network. Federal internal- control standards also state that an entity’s management retains responsibility for the performance of processes assigned to service organizations (such as contractors) and that management should hold these organizations accountable for their performance. In our report, we found that FirstNet has taken a number of steps to establish contract oversight mechanisms, but has not fully assessed the staffing needs of its oversight workforce. FirstNet’s oversight mechanisms include developing policies and procedures to guide contract administration and establishing offices to oversee its network contractor. In particular, FirstNet established the Network Program Office to oversee the contractor’s performance and facilitate quality assurance of contract deliverables, among other things. FirstNet is also receiving assistance from the Department of the Interior, which has experience with contract administration, although FirstNet plans to assume full responsibility for contract administration in the future. We also found that FirstNet’s efforts to develop contract oversight mechanisms aligned with several key actions that we identified as contributing to effective contract oversight. However, although FirstNet’s Network Program Office will perform essential contract administration functions, FirstNet had not conducted long-term projections of staffing needs for the office as of April 2017. Planning for and assigning adequate resources, including people, and performing an assessment of the resources needed to oversee projects is one of the key actions we identified for planning and executing effective contract oversight. We concluded that FirstNet lacks reasonable assurance that it will have sufficient resources to handle increases in its responsibilities over time and that, by performing a long-term staffing assessment for the Network Program Office, FirstNet would be in a better position to fully understand its staffing needs and respond to staffing changes and risks as it assumes full responsibility of contract administration in the future. As such, we recommended in our report that FirstNet assess the long-term staffing needs in the Network Program Office prior to assuming full responsibility for administering the network contract. FirstNet agreed with this recommendation and, in September 2017, described the actions it has taken to implement it. According to FirstNet, in August 2017 the Network Program Office adopted a strategic workforce plan for fiscal years 2018 to 2022, which it expects to update annually. According to FirstNet, this plan provides a comprehensive view of current and future human capital needs required to support the implementation of the network and identifies strategies the office will employ to fill gaps between current and future needs, among other things. If implemented as planned, this action should address the intent of the recommendation. Chairman Donovan, Ranking Member Payne, and Members of the Subcommittee, this concludes my prepared statement. I would be pleased to respond to any questions that you may have at this time. If you or your staff have any questions about this testimony, please contact Mark L. Goldstein, Director, Physical Infrastructure Issues at (202) 512-2834 or goldsteinm@gao.gov. Contact points for our Offices of Congressional Relations and Public Affairs may be found on the last page of this statement. GAO staff who made key contributions to this testimony are Sally Moino and Nalylee Padilla. Other staff who made contributions to the report cited in this testimony are identified in the source product. This is a work of the U.S. government and is not subject to copyright protection in the United States. The published product may be reproduced and distributed in its entirety without further permission from GAO. However, because this work may contain copyrighted images or other material, permission from the copyright holder may be necessary if you wish to reproduce this material separately.

Summary: FirstNet is charged with establishing a nationwide public-safety broadband network that is reliable, secure, and interoperable. To inform this work, FirstNet is consulting with a variety of stakeholders. In March 2017, FirstNet awarded a 25-year contract to AT&T to build, operate, and maintain the network. FirstNet's oversight of AT&T's performance is important given the scope of the network and the duration of the contract. This testimony provides information on (1) FirstNet's efforts to establish the network; (2) stakeholder views on network reliability, security, and interoperability challenges FirstNet faces and its efforts to address them; and (3) FirstNet's plans to oversee its network contractor. This statement is based on GAO's June 2017 report ( GAO-17-569 ). For this report, GAO reviewed FirstNet documentation, key contract oversight practices identified in federal regulations and other sources, tribal communication practices identified by federal agencies, and assessed FirstNet's efforts and plans against these practices. GAO also interviewed FirstNet officials and a nongeneralizable selection of public safety, tribal, and other stakeholders selected to obtain a variety of viewpoints. In June 2017, GAO reported that the First Responder Network Authority (FirstNet) had conducted key efforts to establish the network, namely releasing the request for proposal (RFP) for the network and awarding the network contract to AT&T. As the contractor, AT&T will be responsible for the overall design, development, production, operation, and evolution of the network. Additionally, FirstNet consulted with state and local, federal, and tribal stakeholders. State officials GAO contacted were generally satisfied with FirstNet's efforts to engage them. However, tribal stakeholders GAO contacted expressed concern that FirstNet has not fully engaged in effective communication with tribes. FirstNet engaged tribes through a variety of mechanisms, such as through state points of contact and a working group, but tribes noted that individuals with first-hand knowledge of tribes' experiences are unable to represent tribal views directly among FirstNet's key decision makers. Although FirstNet is required to consult with tribes through state points of contact, a key principle of effective tribal communication is to seek full understanding of tribal concerns and reach consensus where possible. By fully exploring and proposing actions to address tribal stakeholders' concerns, FirstNet could help improve its relations with tribes and better meet stakeholders' needs. According to stakeholders GAO contacted, FirstNet faces various challenges to ensure the network's reliability, security, and interoperability. For example, stakeholders raised concerns related to: providing coverage to rural areas, in buildings, or underground; ensuring the network's overall resiliency and cybersecurity; and managing frameworks for user identity, credentialing of users, access management, and prioritization of users on the network. FirstNet has taken action to address these challenges, such as by opening a test lab to test public safety devices and applications before deploying them on the network. The majority of stakeholders GAO contacted were satisfied with FirstNet's efforts but many noted that much uncertainty remains about how the network will be implemented. FirstNet established offices to oversee its network contractor, developed policies and procedures to guide contract administration—including management and oversight—and is receiving assistance from another federal agency with contract administration experience, although FirstNet plans to assume full responsibility in the future. For example, FirstNet established the Network Program Office to oversee the contractor's performance and facilitate quality assurance of contract deliverables, among other things. Although this office will perform essential contract-administration functions, FirstNet had not conducted long-term projections of staffing needs for the office as of April 2017. As a result, FirstNet lacks reasonable assurance that it will have sufficient resources to handle increases in its responsibilities over time. Planning for and assigning adequate resources, including people, and assessing resource needs is a key practice for planning and executing effective contract oversight. By performing a long-term staffing assessment for the Network Program Office, FirstNet would be in a better position to fully understand its staffing needs and respond to staffing changes and risks as it assumes full responsibility of contract administration in the future. In June 2017, GAO recommended that FirstNet fully explore tribal stakeholders' concerns and assess its long-term staffing needs. FirstNet agreed with GAO's recommendations and described actions to address them.