Although GAO found that “VA's risk management policies and procedures were consistent with leading practices,” it also recommended that officials take further steps to “develop more comprehensive risk ...