Department of Homeland Security

The objective was to determine whether the Department of Homeland Security complied with the Payment Integrity Information Act of 2019 (PIIA) in fiscal year 2022. We determined that although DHS made improvements to reduce improper payments (IP) and unknown payments (UP), it did not comply with the...

The objective for this unannounced inspection was to determine whether U.S. Customs and Border Protection (CBP) complies with National Standards on Transport, Escort, Detention, and Search (TEDS) and other relevant policies and procedures related to length of detention and conditions of detention at...

Based on our evaluation of 18 sampled OTFOC contracts and 16 sampled noncompetitive grants awarded in FYs 2020 and 2021, we determined that DHS components complied with applicable guidance when awarding contracts and grants. DHS officials supported award decisions with the required planning, market...

U.S. Customs and Border Protection (CBP) and U.S. Immigration and Customs Enforcement (ICE) support complex and intersecting missions related to immigration, trade, and travel. Since 2019, shifts in U.S. immigration and border security policies, migrant surges, COVID-19, and the overall rising...

DHS’ information security program for FY 2022 was rated “effective,” according to this year’s reporting instructions. We based this rating on our evaluation of DHS’ compliance with the FISMA requirements on unclassified and National Security Systems, for which DHS improved its maturity level in...

FEMA awarded $110 million in humanitarian relief funds provided by ARPA to the EFSP National Board to provide services to families and individuals encountered by DHS in communities most impacted by the humanitarian crisis at the Southwest border. As of September 8, 2021, the National Board awarded...

Following the SolarWinds breach discovery in 2020, CISA improved its ability to detect and mitigate risks from major cyberattacks, but work remains to safeguard Federal networks. CISA coordinates Federal agencies’ defense against cyberattacks, but the SolarWinds response revealed that CISA did not...

Attached for your action is our final report, Secret Service and ICE Did Not Always Adhere to Statute and Policies Governing Use of Cell-Site Simulators – Law Enforcement Sensitive. We incorporated the formal comments provided by your office.

The Federal Emergency Management Agency (FEMA) did not consistently apply the information technology (IT) access controls needed to restrict unnecessary access to its systems and information. Specifically, FEMA did not promptly remove or adjust system and information access when personnel separated...