
United States
ICE Did Not Always Manage and Secure Mobile Devices to Prevent Unauthorized Access to SensitiveInformation
U.S. Immigration and Customs Enforcement (ICE) did not effectively manage and secure its mobile devices or the infrastructure supporting the devices. Specifically, ICE did not implement security settings required to protect its mobile devices and did not mitigate vulnerabilities from applications...
CISA Faces Challenges Sharing Cyber Threat Information as Required by the Cybersecurity Act of 2015
The Cybersecurity and Infrastructure Security Agency (CISA) addressed the basic information-sharing requirements of the Cybersecurity Act of 2015. In calendar years 2021 and 2022, CISA updated its guidance, properly classified cyber threat indicators (CTI) and defensive measures, and accurately...
CBP Needs to Improve Its Management of the Facility Condition Assessment Program
U.S. Customs and Border Protection (CBP) did not always conduct and manage assessments of owned and leased facilities for the safe and economical use of its real property. Department of Homeland Security policy requires CBP to assess the condition, function, and overall performance of its real...
Summary of Unannounced Inspections of ICE Facilities Conducted in Fiscal Years 2020-2023
From fiscal years 2020 to 2023, we conducted 17 unannounced inspections at U.S. Immigration and Customs Enforcement (ICE) detention facilities across the United States (facility locations below), which resulted in 17 reports and 1 management alert.
Audit of Office of Intelligence and Analysis Contract and Funding Management Processes
RMA Associates, LLC (RMA), under contract with the Department of Homeland Security Office of Inspector General, concluded that the Office of Intelligence and Analysis (I&A) did not fully comply with Financial Acquisition Regulation and DHS requirements. Specifically, I&A’s internal guidance lacked...