Stay Informed
of New Reports
Twitter
Where To Report Waste
Fraud, Abuse, Or Retaliation
Where To Report Waste Fraud, Abuse, Or Retaliation

The EPA Lacks Documented Procedures for Detecting and Removing Unapproved Software on the Agency’s Network

Submitting OIG: 
Environmental Protection Agency OIG
Report Description: 
Without documented procedures governing software management and vulnerability remediation processes, the EPA continues to be at risk of outsiders gaining access to compromise and exploit Agency systems and data.
Date Issued: 
Wednesday, March 30, 2022
Agency Reviewed / Investigated: 
Environmental Protection Agency
Submitting OIG-Specific Report Number: 
22-E-0028
Location(s): 
Agency-Wide
Type of Report: 
Audit
Questioned Costs: 
$0
Funds for Better Use: 
$0
Number of Recommendations: 
2
Report updated under NDAA 5274: 
No
Additional Details Link: 
https://www.epa.gov/office-inspector-general/report-epa-lacks-documented-procedu…

Related Open Recommendations

Recommendation Number Recommendation Status Significant Recommendation Additional Details
22-E-0028_1 Open No
Develop and document procedures for detecting and removing unapproved software on the Agency’s network, to include time frames for removal, risk classifications, and identification of software collecting privacy data.
22-E-0028_2 Open No
Develop and provide training on the Agency’s processes for detecting and removing unapproved software to users with privileges to install software on the EPA’s network.
Displaying 2 of 2 Recommendations