Department of Commerce

For our evaluation of the U.S. Census Bureau's (the Bureau's) cybersecurity posture, our objective was to determine the effectiveness of the Bureau’scybersecurity posture against a simulated real-world attack. To do this, we conducted a covertcyber red team with six goals tailored to relevant risks...

The Office of Inspector General is required by statute to report annually the most serious management and performance challenges facing the U.S. Department of Commerce (the Department). Attached is our final report on the Department’s top management and performance challenges for fiscal year 2023.

For our final report on our audit of the U.S. Department of Commerce’s (theDepartment’s) working capital funds (WCFs) operated by the Office of the Secretary(Departmental) and the National Institute of Standards and Technology (NIST), our auditobjectives were to determine whether (1) the...

For our final report on our audit of the U.S. Department of Commerce’s (the Department’s) collection, production, acquisition, maintenance, distribution, use, and preservation of geospatial data, our objective was to assess the Department’s progress toward compliance with Geospatial Data Act...

For our final report on our audit of the United States Patent and Trademark Office’s (USPTO’s) oversight of Patent Data Capture (PaDaCap) contracts, our audit objective was to determine whether USPTO awarded and administered PaDaCap contracts in compliance with applicable laws and federal...

For our final report on our audit of the U.S. Department of Commerce’s (the Department’s) security controls for cloud-based high value assets (HVAs), our objective was to verify that the Department implemented security controls for cloud-based HVAs in accordance with federal requirements. We found...

For this report, we assessed the adequacy of the U.S. Census Bureau’s (the Bureau's) quality control processes to ensure the data collected during the 2020 Decennial Census (2020 Census) was complete and accurate. This report discusses lessons learned during the nonresponse followup (NRFU)...

For our final report on the audit of First Responder Network Authority’s (FirstNet Authority’s) process for developing Independent Government Cost Estimates (IGCEs) for its first two reinvestment task orders, our audit objective was to determine whether FirstNet Authority's process for reinvesting...

For our final report on our audit of the United States Patent and Trademark Office’s (USPTO’s) patent legacy systems, our audit objective was to review USPTO’s progress towards retiring its patent legacy systems. Specifically, we assessed USPTO’s (1) cost, schedule, and capabilities of select patent...

For our final report on our audit of the U.S. Department of Commerce’s (the Department’s) Business Applications Solution program (the Program), our objective was to assess the Department’s management and implementation of the Program. To meet our objective, we determined the extent to which the...