GAO updates its high-risk list every two years, In 2009, DoD accounted for half of the 30 areas, including eight areas that were specific to the Pentagon, and another seven governmentwide areas that involved DoD. Since then, however, McGrath has been working to reform DoD business practices.