National Archives and Records Administration

This narrative and the responses submitted to the Office of Management and Budget (OMB) through the CyberScope portal provide our independent assessment of the quality of NARA’s information security practices.

This audit evaluated NARA’s cloud computing environment and determine whether NARA was properly prepared to manage its transition to cloud computing services and meet OMB’s goals of a “Cloud First” policy.

NARA OIG initiated this audit to determine whether NARA effectively complied with requirements for accessing NARA facilities and information systems.

17-AUD-06 was issued on November 15, 2016 without management's response. The response was received on December 7, 2016. We assessed management's response and action plan.

NARA OIG performed this audit to assess the effectiveness and efficiency of NARA's procurement program in acquiring goods and services.

We contracted CliftonLarsonAllen LLP to audit NARA’s financial statements as of September 30, 2016 and 2015, and for the years then ended.

This audit was conducted to identify MS Access applications and databases in use across NARA, assess the security controls for those applications and databases, and determine whether NARA is appropriately positioned to accommodate and maintain the applications and databases and security controls...

NARA OIG audited the NARA's compliance with Circular A-123, FMFIA, and internal guidance related to internal controls. We also evaluated the system of internal controls for NARA program offices, the accuracy of NARA’s Fiscal Year (FY) 2015 FMFIA Assurance Statement, and supporting individual office...

NARA OIG performed this audit to determine if NARA has developed a comprehensive information system inventory to track and monitor all information systems operated ormaintained throughout the agency. We also evaluated NARA’s information systems to determine if they were adequately classified and...

Cotton & Company LLP independent report on the NARA's enterprise-wide risk assessment of internal controls and the risks to NARA’s mission, operations, and procedures.