The Census Bureau Must Improve Its Implementation of the Risk Management Framework
The objective of this audit was to determine whether the risk management framework methodology adopted by the U.S. Census Bureau (Bureau) presents an accurate picture of cyber security risks, including risks associated with common controls, to Bureau management.