STATUS OF RECOMMENDATIONS: INFORMATION SYSTEMS SECURITY EVALUATION OF REGION III LISLE, IL (OIG-09-A-15)
|
|
|
- Tamsyn Waters
- 8 years ago
- Views:
Transcription
1 UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C OFFICE OF THE INSPECTOR GENERAL November 25, 2009 MEMORANDUM TO: R. William Borchardt Executive Director for Operations FROM: Stephen D. Dingbaum /RA/ Assistant Inspector General for Audits SUBJECT: REFERENCE: STATUS OF RECOMMENDATIONS: INFORMATION SYSTEMS SECURITY EVALUATION OF REGION III LISLE, IL () DEPUTY EXECUTIVE DIRECTOR FOR REACTOR AND PREPAREDNESS PROGRAMS, OFFICE OF THE EXECUTIVE DIRECTOR FOR OPERATIONS, MEMORANDUM DATED NOVEMBER 2, 2009 Attached is the Office of the Inspector General s analysis and status of recommendations 1, 2, 3, 4, 5, and 6 discussed in the agency s response dated November 2, Based on this response, all recommendations are resolved. Please provide an updated status of the resolved recommendations by March 31, If you have any questions or concerns, please call me at or Beth Serepca, Team Leader, at Attachment: As stated cc: N. Mamish, OEDO J. Andersen, OEDO J. Arlidsen, OEDO C. Jaegers, OEDO
2 Recommendation 1: Fully document backup procedures to include the tape rotation schedule, the procedures for sending and receiving backup tapes to the offsite storage location, and the procedures for periodically testing the backups. Agree. Region III IT staff will update the Divisional Instruction DI-NR-008 Server Administration to explicitly address backup tape rotation schedule, procedures for sending and receiving backup tapes from offsite storage, and procedures for periodically testing the backups. Expected Completion: February 26, OIG receives documentation that Region III has documented and implemented backup procedures for testing and offsite storage of backup tapes.
3 Recommendation 2: Develop and implement procedures for storing backup tapes onsite in a waterproof and fireproof cabinet or safe. Agree. Region III IT staff will update the Divisional Instruction DI-NR-008 Server Administration to explicitly define procedures for storing backup tapes onsite in a waterproof and fireproof cabinet or safe. A waterproof and fireproof cabinet or safe will be procured following the update of the Divisional Instruction provided resources are available this fiscal year. Expected Completion: February 26, OIG receives documentation that Region III has developed and implemented backup procedures for storing tapes onsite in a fireproof cabinet or safe.
4 Recommendation 3: Develop and document a contingency plan for the Region III seat-managed infrastructure servers. Agree. Region III will work with the Office of Information Services (OIS) to update the agency s contingency plan and develop any regional procedures needed to ensure recovery of seat managed infrastructure servers following an emergency or system disruption. OIG receives documentation that Region III has developed and documented a contingency plan for seat-managed infrastructure servers.
5 Recommendation 4: Develop and document a contingency plan for the Region III NRC-managed servers. Agree. Region III will work with the Office of Information Services (OIS) to update the agency s contingency plan and develop any regional procedures needed to ensure recovery of NRC managed infrastructure servers following an emergency or system disruption. OIG receives documentation that Region III has developed and documented a contingency plan for NRC-managed servers.
6 Recommendation 5: Evaluate the vulnerabilities identified by the network vulnerability assessment and develop a plan and schedule to identify any false positives and to resolve the remaining vulnerabilities. Agree. Region III will evaluate the vulnerabilities identified by the network vulnerability assessment and work with the Office of Information Services (OIS) and the Computer Security Office (CSO) to develop a plan and work to identify any false positives. Any remaining vulnerabilities will be resolved. OIG receives documentation that Region III has performed a vulnerability assessment and developed a plan and schedule to identify any false positives and to also resolve the remaining vulnerabilities.
7 Recommendation 6: Perform a network vulnerability scan following remediation to verify all vulnerabilities have been resolved. Agree. Region III will work with the Office of Information Services (OIS) to conduct a network vulnerability scan to validate the remediation of vulnerabilities. OIG receives documentation that Region III has performed a network vulnerability scan following remediation to verify all vulnerabilities have been resolved.
Executive Director for Operations STATUS OF RECOMMENDATIONS: AUDIT OF NRC S PROCESS FOR ENSURING INTEGRITY IN SCIENTIFIC RESEARCH (OIG-15-A-08)
UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 OFFICE OF THE INSPECTOR GENERAL April 6, 2015 MEMORANDUM TO: Mark A. Satorius Executive Director for Operations FROM: Stephen D.
Executive Director for Operations AUDIT OF NRC S CYBER SECURITY INSPECTION PROGRAM FOR NUCLEAR POWER PLANTS (OIG-14-A-15)
UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 OFFICE OF THE INSPECTOR GENERAL May 7, 2014 MEMORANDUM TO: Mark A. Satorius Executive Director for Operations FROM: Stephen D. Dingbaum
AUDIT REPORT. Audit of NRC s Shared S Drive. OIG-11-A-15 July 27, 2011
AUDIT REPORT Audit of NRC s Shared S Drive OIG-11-A-15 July 27, 2011 All publicly available OIG reports (including this report) are accessible through NRC s Web site at: http:/www.nrc.gov/reading-rm/doc-collections/insp-gen/
Independent Evaluation of NRC s Implementation of the Federal Information Security Modernization Act of 2014 for Fiscal Year 2015
Independent Evaluation of NRC s Implementation of the Federal Information Security Modernization Act of 2014 for Fiscal Year 2015 OIG-16-A-03 November 12, 2015 All publicly available OIG reports (including
OIG. Improvements Are Needed for Information Technology Controls at the Las Vegas Finance Center. Audit Report OFFICE OF INSPECTOR GENERAL
OIG OFFICE OF INSPECTOR GENERAL Catalyst for Improving the Environment Audit Report Improvements Are Needed for Information Technology Controls at the Las Vegas Finance Center Report No. 2003-P-00011 May
AUDIT REPORT. Federal Energy Regulatory Commission s Unclassified Cybersecurity Program 2015
U.S. Department of Energy Office of Inspector General Office of Audits and Inspections AUDIT REPORT Federal Energy Regulatory Commission s Unclassified Cybersecurity Program 2015 OAI-L-16-02 October 2015
Memorandum. ACTION: Report on Computer Security Controls of Financial Management System, FTA FE-2000-098. May 23, 2000.
U.S. Department of Transportation Office of the Secretary of Transportation Office of Inspector General Memorandum ACTION: Report on Computer Security Controls of Financial Management System, FTA FE-2000-098
Memorandum. Audit Report No.: OAS-L-08-04 REPLY TO ATTN OF: Chief Financial Officer, CF-1 TO: INTRODUCTION AND OBJECTIVE
'. 01/29/08 15:22 FAX 301 903 4656 CAPITAL REGION Q002 DOE F 1325.8 (s.9 3 25 United States Government Memorandum DATE: January 28, 2008 REPLY TO ATTN OF: SUBJECT: TO: IG-34 (A07TG029) Department of Energy
AUDIT REPORT. Audit of NRC s Communications Security Program. OIG-14-A-21 September 29, 2014
AUDIT REPORT Audit of NRC s Communications Security Program OIG-14-A-21 September 29, 2014 All publicly available OIG reports (including this report) are accessible through NRC s Web site at: http:/www.nrc.gov/reading-rm/doc-collections/insp-gen/
Evaluation Report. Weaknesses Identified During the FY 2013 Federal Information Security Management Act Review. April 30, 2014 Report Number 14-12
Evaluation Report Weaknesses Identified During the FY 2013 Federal Information Security Management Act Review April 30, 2014 Report Number 14-12 U.S. Small Business Administration Office of Inspector General
U.S. Department of Energy Office of Inspector General Office of Audits & Inspections
U.S. Department of Energy Office of Inspector General Office of Audits & Inspections Audit Report Management of Western Area Power Administration's Cyber Security Program DOE/IG-0873 October 2012 Department
Audit Report. Management and Security of Office of Budget and Program Analysis Information Technology Resources. U.S. Department of Agriculture
U.S. Department of Agriculture Office of Inspector General Southeast Region Audit Report Management and Security of Office of Budget and Program Analysis Information Technology Resources Report No. 39099-1-AT
Audit of NRC s Network Security Operations Center
Audit of NRC s Network Security Operations Center OIG-16-A-07 January 11, 2016 All publicly available OIG reports (including this report) are accessible through NRC s Web site at http://www.nrc.gov/reading-rm/doc-collections/insp-gen
U.S. Department of Energy Office of Inspector General Office of Audits and Inspections
U.S. Department of Energy Office of Inspector General Office of Audits and Inspections Audit Report The Department's Configuration Management of Non-Financial Systems OAS-M-12-02 February 2012 Department
TREASURY INSPECTOR GENERAL FOR TAX ADMINISTRATION
TREASURY INSPECTOR GENERAL FOR TAX ADMINISTRATION Disaster Recovery Testing Is Being Adequately Performed, but Problem Reporting and Tracking Can Be Improved May 3, 2012 Reference Number: 2012-20-041 This
for Kimberly F. Benoit Deputy Assistant Inspector General for Information Technology and Data Analysis
August 20, 2014 MEMORANDUM FOR: CHARLES L. MCGANN, JR. MANAGER, CORPORATE INFORMATION SECURITY FROM: for Kimberly F. Benoit Deputy Assistant Inspector General for Information Technology and Data Analysis
Cybersecurity Risk Management Activities Instructions Fiscal Year 2015
Cybersecurity Risk Management Activities Instructions Fiscal Year 2015 An effective risk management program and compliance with the Federal Information Security Management Act (FISMA) requires the U.S.
Office of Inspector General
DEPARTMENT OF HOMELAND SECURITY Office of Inspector General INFORMATION TECHNOLOGY: Final Obstacles Removed To Eliminate Customs Disaster Recovery Material Weakness Office of Information Technology OIG-IT-03-01
Systems Evaluation of the Agencywide Document Access and Management System. OIG-04-A-21 September 30, 2004 REDACTED FOR PUBLIC RELEASE
Systems Evaluation of the Agencywide Document Access and Management System OIG-04-A-21 September 30, 2004 REDACTED FOR PUBLIC RELEASE OFFICE OF THE INSPECTOR GENERAL U.S. NUCLEAR REGULATORY COMMISSION
Romulo Diaz Assistant Administrator for Administration and Resources Management (3101)
MEMORANDUM SUBJECT: FROM: TO: Whistleblower Protection Review Report No. 2000-S-2 Michael Simmons Deputy Assistant Inspector General for Internal Audits (2421) Romulo Diaz Assistant Administrator for Administration
INFORMATION GOVERNANCE POLICY: DATA BACKUP, RESTORE & FILE STORAGE HANDLING
INFORMATION GOVERNANCE POLICY: DATA BACKUP, RESTORE & FILE STORAGE HANDLING Original Approved by: Policy and Procedure Ratification Sub-group on 23 October 2007 Version 2.2 Approved by : Information Governance
U.S. Department of Energy Office of Inspector General Office of Audits & Inspections. Evaluation Report
U.S. Department of Energy Office of Inspector General Office of Audits & Inspections Evaluation Report The Department's Unclassified Cyber Security Program - 2012 DOE/IG-0877 November 2012 MEMORANDUM FOR
AUDIT REPORT. Cybersecurity Controls Over a Major National Nuclear Security Administration Information System
U.S. Department of Energy Office of Inspector General Office of Audits and Inspections AUDIT REPORT Cybersecurity Controls Over a Major National Nuclear Security Administration Information System DOE/IG-0938
Audit of Case Activity Tracking System Security Report No. OIG-AMR-33-01-02
Audit of Case Activity Tracking System Security Report No. OIG-AMR-33-01-02 BACKGROUND OBJECTIVES, SCOPE, AND METHODOLOGY FINDINGS INFORMATION SECURITY PROGRAM AUDIT FOLLOW-UP CATS SECURITY PROGRAM PLANNING
U.S. Department of Energy Office of Inspector General Office of Audits and Inspections. Evaluation Report
U.S. Department of Energy Office of Inspector General Office of Audits and Inspections Evaluation Report The Department's Unclassified Cyber Security Program 2011 DOE/IG-0856 October 2011 Department of
Education and Workforce Development Cabinet POLICY/PROCEDURE. Policy Number: EDU-06 Effective Date: April 15, 2006 Revision Date: December 20, 2012
Education and Workforce Development Cabinet POLICY/PROCEDURE Policy Number: EDU-06 Effective Date: April 15, 2006 Revision Date: December 20, 2012 Subject: Backup Procedures Tower and Server Farms Policy:
March 25, 2004. Executive Director for Operations. Jesse L. Funches Chief Financial Officer
March 25, 2004 MEMORANDUM TO: William D. Travers Executive Director for Operations Jesse L. Funches Chief Financial Officer FROM: Stephen D. Dingbaum/RA/ Assistant Inspector General for Audits SUBJECT:
EVALUATION REPORT. Weaknesses Identified During the FY 2014 Federal Information Security Management Act Review. March 13, 2015 REPORT NUMBER 15-07
EVALUATION REPORT Weaknesses Identified During the FY 2014 Federal Information Security Management Act Review March 13, 2015 REPORT NUMBER 15-07 EXECUTIVE SUMMARY Weaknesses Identified During the FY 2014
REDACTED FOR PUBLIC RELEASE
System Evaluation of the Integrated Personnel Security System (IPSS) OIG-05-A-08 January 14, 2005 REDACTED FOR PUBLIC RELEASE OFFICE OF THE INSPECTOR GENERAL U.S. NUCLEAR REGULATORY COMMISSION System Evaluation
July 30, 2009. Internal Audit Report 2009-08 Information Technology Business Continuity Plan Information Technology Department
Internal Audit Report 2009-08 Introduction. The Municipality depends heavily on technology and automated information systems, and their disruption for even a few days could have a severe impact on critical
Office of Inspector General
DEPARTMENT OF HOMELAND SECURITY Office of Inspector General Security Weaknesses Increase Risks to Critical United States Secret Service Database (Redacted) Notice: The Department of Homeland Security,
Final Audit Report -- CAUTION --
U.S. OFFICE OF PERSONNEL MANAGEMENT OFFICE OF THE INSPECTOR GENERAL OFFICE OF AUDITS Final Audit Report Audit of the Information Technology Security Controls of the U.S. Office of Personnel Management
January 20, 2009 GEORGE W. WRIGHT VICE PRESIDENT, INFORMATION TECHNOLOGY OPERATIONS
January 20, 2009 GEORGE W. WRIGHT VICE PRESIDENT, INFORMATION TECHNOLOGY OPERATIONS SUBJECT: Audit Report Service Continuity at the Information Technology and (Report Number ) This report presents the
INFORMATION SECURITY. Evaluation of GAO s Program and Practices for Fiscal Year 2012 OIG-13-2
INFORMATION SECURITY Evaluation of GAO s Program and Practices for Fiscal Year 2012 OIG-13-2 Office of the Inspector General U.S. Government Accountability Office Report Highlights February 2013 INFORMATION
Results of Technical Network Vulnerability Assessment: EPA s Region 6
.S. ENVIRONMENTAL PROTECTION AGENCY OFFICE OF INSPECTOR GENERAL Results of Technical Network Vulnerability Assessment: EPA s Report No. 1-P-0659 August 10, 01 Scan this mobile code to learn more about
U.S. OFFICE OF PERSONNEL MANAGEMENT OFFICE OF THE INSPECTOR GENERAL OFFICE OF AUDITS. Final Audit Report
U.S. OFFICE OF PERSONNEL MANAGEMENT OFFICE OF THE INSPECTOR GENERAL OFFICE OF AUDITS Final Audit Report Audit of the Information Technology Security Controls of the U.S. Office of Personnel Management
Fiscal Year 2014 Federal Information Security Management Act Report: Status of EPA s Computer Security Program
U.S. ENVIRONMENTAL PROTECTION AGENCY OFFICE OF INSPECTOR GENERAL Information Technology Fiscal Year 2014 Federal Information Security Management Act Report: Status of EPA s Computer Security Program Report.
EPA Needs to Improve Security Planning and Remediation of Identified Weaknesses in Systems Used to Protect Human Health and the Environment
U.S. ENVIRONMENTAL PROTECTION AGENCY OFFICE OF INSPECTOR GENERAL Information Technology EPA Needs to Improve Security Planning and Remediation of Identified Weaknesses in Systems Used to Protect Human
Tailored Technologies LLC
685 Third Avenue New York, NY 10017 Tel: (212) 503-6300 Fax: (212) 503-6312 Date: January 9, 2014 To: The Audit File of the Hugh L. Carey Battery Park City Authority From: Tailored Technology Observations
U.S. ELECTION ASSISTANCE COMMISSION OFFICE OF INSPECTOR GENERAL
U.S. ELECTION ASSISTANCE COMMISSION OFFICE OF INSPECTOR GENERAL FINAL REPORT: U.S. Election Assistance Commission Compliance with the Requirements of the Federal Information Security Management Act Fiscal
AUDIT REPORT. The Energy Information Administration s Information Technology Program
U.S. Department of Energy Office of Inspector General Office of Audits and Inspections AUDIT REPORT The Energy Information Administration s Information Technology Program DOE-OIG-16-04 November 2015 Department
U.S. Department of Energy Office of Inspector General Office of Audits and Inspections
U.S. Department of Energy Office of Inspector General Office of Audits and Inspections Audit Report Management of Los Alamos National Laboratory's Cyber Security Program DOE/IG-0880 February 2013 Department
How To Write A Network Vulnerability Assessment For The Environment Protection Agency
U.S. ENVIRONMENTAL PROTECTION AGENCY OFFICE OF INSPECTOR GENERAL Quick Reaction Report Catalyst for Improving the Environment Results of Technical Network Vulnerability Assessment: EPA s Ronald Reagan
TREASURY INSPECTOR GENERAL FOR TAX ADMINISTRATION
TREASURY INSPECTOR GENERAL FOR TAX ADMINISTRATION The Office of Research, Analysis, and Statistics Needs to Address Computer Security Weaknesses September 17, 2008 Reference Number: 2008-20-176 This report
FEDERAL ELECTION COMMISSION OFFICE OF INSPECTOR GENERAL
FEDERAL ELECTION COMMISSION OFFICE OF INSPECTOR GENERAL FINAL REPORT INSPECTION OF THE FEDERAL ELECTION COMMISSION'S DISASTER RECOVERY PLAN AND CONTINUITY OF OPERATIONS PLANS January 2013 ASSIGNMENT No.
Parcel Readiness Product Tracking and Reporting System Controls
Parcel Readiness Product Tracking and Reporting System Controls Audit Report Report Number IT-AR-5-002 December 6, 204 The Postal Service needs to improve its process for managing and securing the PTR
Results of Technical Network Vulnerability Assessment: EPA s Region 1
U.S. ENVIRONMENTAL PROTECTION AGENCY OFFICE OF INSPECTOR GENERAL Results of Technical Network Vulnerability Assessment: EPA s Region 1 Report No. 12-P-0518 June 5, 2012 Scan this mobile code to learn more
Office of Inspector General
Office of Inspector General DEPARTMENT OF HOMELAND SECURITY U.S. Department of Homeland Security Washington, DC 20528 Office of Inspector General Security Weaknesses Increase Risks to Critical DHS Databases
VOLPE CENTER S INFORMATION TECHNOLOGY SECURITY AND RESOURCE MANAGEMENT ACTIVITIES
VOLPE CENTER S INFORMATION TECHNOLOGY SECURITY AND RESOURCE MANAGEMENT ACTIVITIES Research and Innovative Technology Administration Report Number: FI-2007-061 Date Issued: August 1, 2007 U.S. Department
TREASURY INSPECTOR GENERAL FOR TAX ADMINISTRATION
TREASURY INSPECTOR GENERAL FOR TAX ADMINISTRATION Taxpayer Data Used at Contractor Facilities May Be at Risk for Unauthorized Access or Disclosure May 18, 2010 Reference Number: 2010-20-051 This report
AUDIT OF SBA S EMAIL SYSTEM AUDIT REPORT NUMBER 4-42 SEPTEMBER 10, 2004
AUDIT OF SBA S EMAIL SYSTEM AUDIT REPORT NUMBER 4-42 SEPTEMBER 10, 2004 This report may contain proprietary information subject to the provisions of 18 USC 1905 and must not be released to the public or
OFFICE OF THE INSPECTOR GENERAL SOCIAL SECURITY ADMINISTRATION
OFFICE OF THE INSPECTOR GENERAL SOCIAL SECURITY ADMINISTRATION THE PHYSICAL SECURITY OF THE SOCIAL SECURITY ADMINISTRATION S CONTRACTOR OWNED AND OPERATED OFF-SITE STORAGE FACILITY September 2012 A-14-12-11227
Hanh Do, Director, Information System Audit Division, GAA. SUBJECT: Review of HUD s Information Technology Contingency Planning and Preparedness
Issue Date: August 31, 2006 Audit Report Number 2006-DP-0005 TO: Lisa Schlosser, Chief Information Officer, A FROM: Hanh Do, Director, Information System Audit Division, GAA SUBJECT: Review of HUD s Information
CTR System Report - 2008 FISMA
CTR System Report - 2008 FISMA February 27, 2009 TABLE of CONTENTS BACKGROUND AND OBJECTIVES... 5 BACKGROUND... 5 OBJECTIVES... 6 Classes and Families of Security Controls... 6 Control Classes... 7 Control
EXECUTIVE SUMMARY. We found that back-up activities were reasonably effective to minimize data loss but that improvements were needed in the areas of:
EXECUTIVE SUMMARY The Securities and Exchange Commission (SEC), Office of Inspector General (OIG) sought to determine whether the SEC s current data back-up procedures were reasonably effective in insuring
How To Audit The Mint'S Information Technology
Audit Report OIG-05-040 INFORMATION TECHNOLOGY: Mint s Computer Security Incident Response Capability Needs Improvement July 13, 2005 Office of Inspector General Department of the Treasury Contents Audit
Information Security Series: Security Practices. Integrated Contract Management System
OFFICE OF INSPECTOR GENERAL Audit Report Catalyst for Improving the Environment Information Security Series: Security Practices Integrated Contract Management System Report No. 2006-P-00010 January 31,
Disaster Recovery and Business Continuity Plan
Disaster Recovery and Business Continuity Plan Table of Contents 1. Introduction... 3 2. Objectives... 3 3. Risks... 3 4. Steps of Disaster Recovery Plan formulation... 3 5. Audit Procedure.... 5 Appendix
Review of Document Imaging Railroad Unemployment Insurance Act Programs Report No. 01-01, November 17, 2000
Review of Document Imaging Railroad Unemployment Insurance Act Programs Report No. 01-01, November 17, 2000 This report represents the results of the Office of Inspector General s (OIG) review of the Railroad
AUDIT GUIDELINES FOR SCHOOL DISASTER RECOVERY PLANNING
AUDIT GUIDELINES FOR SCHOOL DISASTER RECOVERY PLANNING Introduction It has become increasingly common for schools to place a great deal of reliance upon PC s and computer systems to manage and operate
Cloud Computing Contract Clauses
Cloud Computing Contract Clauses Management Advisory Report Report Number SM-MA-14-005-DR April 30, 2014 Highlights The 13 cloud computing contracts did not address information accessibility and data security
2014 Audit of the Board s Information Security Program
O FFICE OF I NSPECTOR GENERAL Audit Report 2014-IT-B-019 2014 Audit of the Board s Information Security Program November 14, 2014 B OARD OF G OVERNORS OF THE F EDERAL R ESERVE S YSTEM C ONSUMER FINANCIAL
Identify and Protect Your Vital Records
Identify and Protect Your Vital Records INTRODUCTION The Federal Emergency Management Agency s Federal Preparedness Circular 65 states The protection and ready availability of electronic and hardcopy documents,
UNITED STATES NUCLEAR REGULATORY COMMISSION ADVISORY COMMITTEE ON REACTOR SAFEGUARDS WASHINGTON, DC 20555-0001. July 17, 2012
UNITED STATES NUCLEAR REGULATORY COMMISSION ADVISORY COMMITTEE ON REACTOR SAFEGUARDS WASHINGTON, DC 20555-0001 July 17, 2012 Mr. R. W. Borchardt Executive Director for Operations U.S. Nuclear Regulatory
Federal Information Security Management Act: Fiscal Year 2014 Evaluation
Federal Information Security Management Act: Fiscal Year 2014 Evaluation OFFICE OF INSPECTOR GENERAL UNITED STATES SECURITIES AND EXCHANGE COMMISSION WASHINGTON, D.C. 20549 M E M O R A N D U M TO: FROM:
Final Audit Report -- CAUTION --
U.S. OFFICE OF PERSONNEL MANAGEMENT OFFICE OF THE INSPECTOR GENERAL OFFICE OF AUDITS Final Audit Report Audit of Information Systems General and Application Controls and Administrative Expense Review at
Review of the SEC s Systems Certification and Accreditation Process
Review of the SEC s Systems Certification and Accreditation Process March 27, 2013 Page i Should you have any questions regarding this report, please do not hesitate to contact me. We appreciate the courtesy
DOJ Guidance on Use of the False Claims Act in Health Care Matters
DOJ Guidance on Use of the False Claims Act in Health Care Matters The following document is a public document published by the Department of Justice at www.usdoj.gov/dag/readingroom/chcm.htm. U.S. DEPARTMENT
How To Check If Nasa Can Protect Itself From Hackers
SEPTEMBER 16, 2010 AUDIT REPORT OFFICE OF AUDITS REVIEW OF NASA S MANAGEMENT AND OVERSIGHT OF ITS INFORMATION TECHNOLOGY SECURITY PROGRAM OFFICE OF INSPECTOR GENERAL National Aeronautics and Space Administration
INSPECTION U.S. DEPARTMENT OF THE INTERIOR WEB HOSTING SERVICES
INSPECTION U.S. DEPARTMENT OF THE INTERIOR WEB HOSTING SERVICES Report No.: ISD-IS-OCIO-0001-2014 June 2014 OFFICE OF INSPECTOR GENERAL U.S.DEPARTMENT OF THE INTERIOR Memorandum JUN 0 4 2014 To: From:
Briefing Report: Improvements Needed in EPA s Information Security Program
U.S. ENVIRONMENTAL PROTECTION AGENCY OFFICE OF INSPECTOR GENERAL Briefing Report: Improvements Needed in EPA s Information Security Program Report No. 13-P-0257 May 13, 2013 Scan this mobile code to learn
POLICY ISSUE INFORMATION
POLICY ISSUE INFORMATION November 19, 2010 SECY-10-0153 FOR: FROM: SUBJECT: The Commissioners R. W. Borchardt Executive Director for Operations CYBER SECURITY IMPLEMENTATION OF THE COMMISSION S DETERMINATION
Application / Hardware - Business Impact Analysis Template. MARC Configuration Requirements. Business Impact Analysis
Application / Hardware - Business Impact Analysis Template The single most important thing we can do is help you understand the criticality of each application, supporting hardware/server/pc and the required
Results of Technical Network Vulnerability Assessment: EPA s Andrew W. Breidenbach Environmental Research Center
U.S. ENVIRONMENTAL PROTECTION AGENCY OFFICE OF INSPECTOR GENERAL Quick Reaction Report Catalyst for Improving the Environment Results of Technical Network Vulnerability Assessment: EPA s Andrew W. Breidenbach
U.S. Department of Agriculture Office of Inspector General Financial and IT Operations Audit Report
U.S. Department of Agriculture Office of Inspector General Financial and IT Operations Audit Report SECURITY OF INFORMATION TECHNOLOGY RESOURCES AT USDA DEPARTMENTAL ADMINISTRATION Report No. 23099-2-FM
December 5, 2013 VENDOR INSPECTION PROGRAM ANNUAL SELF-ASSESSMENT REPORT FOR FISCAL YEAR 2013
December 5, 2013 MEMORANDUM TO: FROM: Michael C. Cheok, Acting Director Division of Construction Inspection and Operational Programs Office of New Reactors Edward H. Roach, Chief /RA/ Mechanical Vendor
EPA Could Improve Its Information Security by Strengthening Verification and Validation Processes
OFFICE OF INSPECTOR GENERAL Audit Report Catalyst for Improving the Environment EPA Could Improve Its Information Security by Strengthening Verification and Validation Processes Report No. 2006-P-00002
INNOVATE. MSP Services Overview SVEN RADEMACHER THROUGH MOTIVATION
INNOVATE THROUGH MOTIVATION MSP Services Overview SVEN RADEMACHER Agenda About us IT Challenges Our Approach Our Services Next Steps About Us SEAFAIR IT SOLUTIONS Pre-eminent Managed Service Provider Provide
Birkenhead Sixth Form College IT Disaster Recovery Plan
Author: Role: Mal Blackburne College Learning Manager Page 1 of 14 Introduction...3 Objectives/Constraints...3 Assumptions...4 Incidents Requiring Action...4 Physical Safeguards...5 Types of Computer Service
U.S. NUCLEAR REGULATORY COMMISSION MANAGEMENT DIRECTIVE (MD) Personnel Management Position Evaluation and Management, Pay Administration, and Leave
U.S. NUCLEAR REGULATORY COMMISSION MANAGEMENT DIRECTIVE (MD) MD 10.49 STUDENT LOAN REPAYMENT PROGRAM DT-15-03 Volume 10, Part 2: Approved By: Personnel Management Position Evaluation and Management, Pay
Audit Report. Management of Naval Reactors' Cyber Security Program
U.S. Department of Energy Office of Inspector General Office of Audits and Inspections Audit Report Management of Naval Reactors' Cyber Security Program DOE/IG-0884 April 2013 Department of Energy Washington,
Follow-up Audit of Internal Controls Over the Customer Information and Control System for the FDIC Financial Systems
January 2, 2002 Audit Report No. 02-001 Follow-up Audit of Internal Controls Over the Customer Information and Control System for the FDIC Financial Systems Federal Deposit Insurance Corporation Washington,
Office of Inspector General
DEPARTMENT OF HOMELAND SECURITY Office of Inspector General Disaster Recovery Planning for DHS Information Systems Needs Improvement (Redacted) Notice: The Department of Homeland Security, Office Inspector
Department of Health and Human Services OFFICE OF INSPECTOR GENERAL
Department of Health and Human Services OFFICE OF INSPECTOR GENERAL THE CENTERS FOR MEDICARE & MEDICAID SERVICES IMPLEMENTATION OF SECURITY CONTROLS OVER THE MULTIDIMENSIONAL INSURANCE DATA ANALYTICS SYSTEM
TREASURY INSPECTOR GENERAL FOR TAX ADMINISTRATION
TREASURY INSPECTOR GENERAL FOR TAX ADMINISTRATION Corrective Actions to Address the Disaster Recovery Material Weakness Are Being Completed June 27, 2011 Report Number: 2011-20-060 This report has cleared
United States Department of Agriculture Office of Inspector General
United States Department of Agriculture Office of Inspector General United States Department of Agriculture Office of Inspector General Washington, D.C. 20250 DATE: September 26, 2012 AUDIT NUMBER: 88401-01-11
EPA Can Better Assure Continued Operations at National Computer Center Through Complete and Up-to-Date Documentation for Contingency Planning
U.S. ENVIRONMENTAL PROTECTION AGENCY OFFICE OF INSPECTOR GENERAL Information Technology EPA Can Better Assure Continued Operations at National Computer Center Through Complete and Up-to-Date Documentation
United States Patent and Trademark Office
U.S. DEPARTMENT OF COMMERCE Office of Inspector General United States Patent and Trademark Office FY 2009 FISMA Assessment of the Patent Cooperation Treaty Search Recordation System (PTOC-018-00) Final
A Regulatory Approach to Cyber Security
A Regulatory Approach to Cyber Security Perry Pederson Security Specialist (Cyber) Office of Nuclear Security and Incident Response U.S. Nuclear Regulatory Commission 1 Agenda Overview Regulatory Framework
FISH AND WILDLIFE SERVICE INFORMATION RESOURCES MANAGEMENT. Chapter 7 Information Technology (IT) Security Program 270 FW 7 TABLE OF CONTENTS
TABLE OF CONTENTS General Topics Purpose and Authorities Roles and Responsibilities Policy and Program Waiver Process Contact Abbreviated Sections/Questions 7.1 What is the purpose of this chapter? 7.2
OFFICIAL USE ONLY. Department of Energy. DATE: January 31, 2007 Audit Report Number: OAS-L-07-06
DOE F 1325.8 (08-93) United States Government Memorandum Department of Energy DATE: January 31, 2007 Audit Report Number: OAS-L-07-06 REPLY TO ATTN OF: SUBJECT: TO: IG-34 (A06TG041) Evaluation of the "Office
Review of Information Technology s Data System Backup and Disaster Recovery Process Page 2 of 10 September 30, 2013
Page 2 of 10 Scope and Objectives We reviewed the backup and disaster recovery processes utilized by DOH for information applications/systems managed by IT over the last three years. This review included
Appendix 10 IT Security Implementation Guide. For. Information Management and Communication Support (IMCS)
Appendix 10 IT Security Implementation Guide For Information Management and Communication Support (IMCS) 10.1 Security Awareness Training As defined in NPR 2810.1A, all contractor personnel with access
EVALUATION REPORT. The Department of Energy's Unclassified Cybersecurity Program 2014
U.S. Department of Energy Office of Inspector General Office of Audits and Inspections EVALUATION REPORT The Department of Energy's Unclassified Cybersecurity Program 2014 DOE/IG-0925 October 2014 Department
Department of Health and Human Services OFFICE OF INSPECTOR GENERAL
Department of Health and Human Services OFFICE OF INSPECTOR GENERAL HIGH-RISK SECURITY VULNERABILITIES IDENTIFIED DURING REVIEWS OF INFORMATION SYSTEM GENERAL CONTROLS AT THREE CALIFORNIA MANAGED-CARE
AR 05-066. Office of Inspector General
AR 05-066 Office of Inspector General Review of Federal Information Security Management Act Corrective Actions for July 2004 March 31, 2005 OFFICE OF INSPECTOR GENERAL FEDERAL TRADE COMMlSSION WASHINGTON,
UNITED STATES COMMISSION ON CIVIL RIGHTS. Fiscal Year 2012 Federal Information Security Management Act Evaluation
Memorandum UNITED STATES COMMISSION ON CIVIL RIGHTS Date: November 15, 2012 To: From: Subject: The Honorable Commissioners Frances Garcia, Inspector General Fiscal Year 2012 Federal Information Security
AUDIT REPORT. The Department of Energy's Implementation of Voice over Internet Protocol Telecommunications Networks
U.S. Department of Energy Office of Inspector General Office of Audits and Inspections AUDIT REPORT The Department of Energy's Implementation of Voice over Internet Protocol Telecommunications Networks
U.S. Department of Energy Office of Inspector General Office of Audits and Inspections. Examination Report
Fresno U.S. Department of Energy Office of Inspector General Office of Audits and Inspections Examination Report Community Action Partnership of San Bernardino County Weatherization Assistance Program
Client Security Risk Assessment Questionnaire
Select the appropriate answer from the drop down in the column, and provide a brief description in the section. 1 Do you have a member of your organization with dedicated information security duties? 2