Independent Audit on the Effectiveness of EXIM’s Information Security - Fiscal Year 2022

Submitting OIG:

Date Issued:

Thursday, March 2, 2023

Agency Reviewed / Investigated:

Submitting OIG-Specific Report Number:

OIG-AR-23-04

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

View Document:

Attachment	Size
Redacted-Final-Report-Independent-Audit-Effectiveness-EXIMs-Information-Security-Program-and.pdf	2.9 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
1	Open	No
Update and implement the Enterprise Risk Management program, including applicable policies and procedures, to align with the new requirements outlined in the NIST SP 800-53, Rev. 5, Security and Privacy Controls for Information Systems and Organizations, dated September 23, 2020.