| Text of Recommendation | Perform a cost benefit analysis of introducing automation to support a centralized view of cybersecurity risks, manage risk designations, maintain privileged accounts, and test system contingency plans; and apply the appropriate risk mitigation strategy. |
|---|---|
| Recommendation Number | 3 |
| Recommendation Status | Open |
| Significant Recommendation | Yes |
| Recommendation Questioned Costs | $0 |
| Recommendation Funds for Better Use | $0 |
| Additional Details Link |
| Submitting OIG | |
|---|---|
| Report Title | Quality Control Review of the Independent Auditor’s Report on the Surface Transportation Board’s Information Security Program and Practices |
| Report Submitting OIG-Specific Report Number | QC2024038 |
| Report Date Issued | Wednesday, September 4, 2024 |
| Report Agency Reviewed / Investigated | |
| Report Questioned Costs | $0 |
| Report Funds for Better Use | $0 |