Where To Report Waste

Fraud, Abuse, Or Retaliation

Security Controls Over the FDIC's Wireless Networks

Submitting OIG:

Federal Deposit Insurance Corporation OIG

Date Issued:

Tuesday, December 13, 2022

Agency Reviewed / Investigated:

Federal Deposit Insurance Corporation

Submitting OIG-Specific Report Number:

REV-23-001

Location(s):

Agency-Wide

Type of Report:

Review

Questioned Costs:

$0

Funds for Better Use:

$0

Number of Recommendations:

8

Report updated under NDAA 5274:

No

View Document:

Attachment	Size
REV-23-001-Redacted.pdf	1.9 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
1	Open	No
Ensure that wireless security weaknesses are consistently documented in POA&Ms and updated accordingly.
2	Open	No
Develop and implement a policy to review, approve, and centrally manage the configuration settings of current and future Wi-Fi enabled devices in FDIC facilities, before set-up and subsequent updates.
3	Open	No
Conduct a review of FDIC wireless devices and identify those that should not be broadcasting inside and leaking outside the buildings and take appropriate mitigation measures.
4	Open	No
Develop and implement a process to regularly examine FDIC wireless devices and their broadcast areas in order to determine appropriate mitigation measures.
7	Open	No
Resolve incompatibilities between the third-party vendor’s scanning tool and FDIC wireless infrastructure components, or conduct an analysis to identify viable alternatives for FDIC wireless infrastructure components and the associated level of effort and costs to enhance the vulnerability scanning process.
8	Open	No
Develop, update, and implement wireless policies, procedures, and standards that reflect the FDIC’s current business practices and key aspects of wireless data communications, roles and responsibilities, and acceptable use agreements.