EPA Needs to Improve Processes for Updating Guidance, Monitoring Corrective Actions, and Managing Remote Access for External Users

Deficiencies in the EPA’s information technology internal controls could be used to exploit weaknesses in Agency applications and hinder the EPA’s ability to prevent, detect, and respond to emerging cyberthreats.