Require an Inspector General report on SEC IT spending and contracting

Research notes

• The bill that is the ask. H.R. 9329, the SEC Reform and Restructuring Act (Rep. Ann Wagner), introduced 2026-06-18, ordered reported by the Committee on Financial Services 28-23 on 2026-06-30. Section 301 is titled “GAO Audit of Information Technology Infrastructure and Handling of Data” and requires the Comptroller General, within one year of enactment, to audit the Commission’s IT infrastructure and data handling including “a comparison of the Commission’s IT spending to other Federal financial regulators”, “examining the quality and effectiveness of the Commission’s IT contracting”, the sufficiency of its cybersecurity, and any recent breaches, and to report findings and recommendations to the Commission and both committees. Text read at https://www.govinfo.gov/content/pkg/BILLS-119hr9329ih/html/BILLS-119hr9329ih.htm; the action history at https://www.govinfo.gov/bulkdata/BILLSTATUS/119/hr/BILLSTATUS-119hr9329.xml. Committee action is not a rung on the Requires-Congress ladder, so the Status stays at not started and the bill is named here rather than cited as Evidence.
• No report exists yet. A domain-restricted search of gao.gov for an SEC information technology spending and contracting report returned only Financial Audit: Securities and Exchange Commission’s FY 2025 Financial Statements (GAO-26-107978), the annual financial-statement audit, which is not the report the Quote asks for. that search was run off-site, because this pass believed gao.gov was walled. It was not — see the bullet below: gao.gov opens on the full Chrome header set, its agency page exists at a non-obvious slug, and the search was re-run against GAO’s own index on 2026-09-03 and again on 2026-09-06 with the same result. The read-queue row raised here was closed on that basis.
• The OIG half of the bound is removed (2026-09-03, read-queue ticket 04). sec.gov opens to the full browser header set, and the OIG’s complete index — by year back to 1994 — was read at https://www.sec.gov/office-inspector-general/reports-publications/audit-evaluation-other-reports. The eleven in-window products are, for 2026: Report No. 591, Evaluation of the SEC’s FY 2025 Compliance With the Payment Integrity Information Act of 2019 (2026-07-30); Final Management Letter: Contract Management Concerns Identified During OIG Evaluation of Enforcement’s Collection and Distribution of Disgorgements and Penalties (2026-07-02); Report No. 590, Opportunities Exist to Strengthen Investment Management’s Disclosure Review Program (2026-05-04); Report No. 589, the FY2025 FISMA evaluation (2026-02-25). For 2025: Report No. 588, Observations on the SEC’s Rulemaking Process (2025-09-29); Report No. 587, the Gensler text-messages special review (2025-09-03); Report No. 586, on Corporation Finance’s Disclosure Review Program (2025-08-26); Final Management Letter on consolidating the Disclosure Review IT systems (2025-06-24); Final Management Letter on recruiting and retaining a highly skilled workforce (2025-05-14); Report No. 585, Additional Oversight and Monitoring of the SEC’s CAT Usage Is Needed (2025-03-31); Final Management Letter on FY2024 Payment Integrity Information Act compliance (2025-03-11). The nearest matches to this ask’s subject are pre-window: Report 582, The SEC Missed Opportunities to Lower Contract Risk and More Effectively Manage Time-and-Materials Contracts (2024-08-26); Report 555, The SEC Has Processes to Manage Information Technology Investments But Improvements Are Needed (2019-09-19); and Report 538, Audit of the SEC’s Information Technology Requirements-Gathering Process (2016-09-30).
• The GAO half of the bound is removed too, and the earlier report of a missing agency page was wrong. GAO does have an SEC agency page; it is at the non-obvious slug https://www.gao.gov/agencies/united-states-securities-exchange-commission, found on 2026-09-03 by paging https://www.gao.gov/agencies?page=0…7 and grepping the hrefs after securities-and-exchange-commission, securities-exchange-commission, us-securities-exchange-commission, securities-and-exchange-commission-0 and sec all returned HTTP 404. gao.gov/search?q=… is a JavaScript shell that returns no prose, so it cannot carry a negative; the agency page can, and it lists GAO’s recent SEC products directly. None of them is an audit of SEC information technology spending or IT contracting. The in-window list, read 2026-09-03: GAO-26-108959 Priority Open Recommendations: SEC (2026-06-10), GAO-26-107823 Updating Assessments of Staff Procedures Could Improve Key Agency Operations (2026-03-27), GAO-26-107813 Recent Workforce Reductions and Other Personnel Management Changes (2026-03-27), GAO-26-107650 Protections For Whistleblowers and Others (2026-03-03), GAO-26-107978 Financial Audit: SEC’s FY 2025 Financial Statements (2026-01-16) and GAO-25-107500 Sarbanes-Oxley Act: Compliance Costs (2025-06-18). Both halves of this negative — the OIG’s index and GAO’s — have now been read to their ends, and the item turns entirely on whether H.R. 9329 § 301 is enacted.
• H.R. 3318, the SEC Modernization Act (2025-05-09), and H.R. 6161, the SEC Data Protection Act (2025-11-19), are the two other SEC IT-adjacent bills; both were referred and never moved, and neither orders an IT spending audit.