FY 2022 FISMA DOL Information Security Report: DOL'S Information Security Program Not Remaining Current with Security Requirements

Submitting OIG:

Date Issued:

Friday, February 10, 2023

Agency Reviewed / Investigated:

Submitting OIG-Specific Report Number:

23-23-001-07-725

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

View Document:

Attachment	Size
23-23-001-07-725-FY-2022-FISMA-DOL-Information-Security-Report-DOLS-Information-Security-Program-Not.pdf	3.61 MB

Additional Details Link:

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation
01	Open	Yes
Update DOL entity-wide and system-level security policies, procedures, and plans to comply with NIST SP 800-53, Rev. 5.
03	Open	Yes
Implement proper quality control to ensure change management processes are being performed for all systems and equipment on the DOL network.
5	Open	Yes
Implement data loss prevention tools and alerts based on the results of agencies’ data exfiltration tests.

Recommendation Number

Recommendation Status

Significant Recommendation

Additional Details

Open

Yes

Open

Yes

Open

Yes