We recommend that the OCIO meet the requirements of OMB M-11-11 by upgrading its major information systems to require multi-factor authentication using PIV credentials. Note: OMB updated the guidance referenced in this recommendation with the issuance of OMB M-19-17. As such, OPM should ensure its PIV compliance efforts align to the new guidance. We have not adjusted the language of the recommendation and continue to roll forward the recommendation as the new guidance still requires OPM to update its major information systems to require multi-factor authentication using PIV credentials.