GAO: Time to update the CFO Act