The EPA Lacks Documented Procedures for Detecting and Removing Unapproved Software on the Agency’s Network
Without documented procedures governing software management and vulnerability remediation processes, the EPA continues to be at risk of outsiders gaining access to compromise and exploit Agency systems and data.