| Text of Recommendation | Update the existing continuous monitoring strategy to define (a) qualitative and quantitative performance measures or data that should be collected to assess the effectiveness of the agency’s continuous monitoring program; (b) procedures for reviewing and modifying all aspects of the agency’s continuous monitoring strategy; and (c) the agency’s ongoing authorization process. |
|---|---|
| Recommendation Number | 16 |
| Recommendation Status | Closed |
| Significant Recommendation | Yes |
| Recommendation Questioned Costs | $0 |
| Recommendation Funds for Better Use | $0 |
| Submitting OIG | |
|---|---|
| Report Title | Audit of the SEC’s Compliance With the Federal Information Security Modernization Act for Fiscal Year 2017 |
| Report Submitting OIG-Specific Report Number | 546 |
| Report Date Issued | Friday, March 30, 2018 |
| Report Agency Reviewed / Investigated | |
| Report Questioned Costs | $0 |
| Report Funds for Better Use | $0 |