USCIS Should Improve Controls to Restrict Unauthorized Access to Its Systems and Information
We determined that USCIS did not apply the IT access controls needed to restrict unnecessary access to its systems, networks, and information. Specifically, USCIS did not consistently manage access for personnel, service accounts, and privileged users. We attribute these deficiencies to insufficient...