Evaluation of the FLRA's Compliance with the Federal Information Modernization Act of 2014 for Fiscal Yar 2024

Submitting OIG:

Report Description:

Date Issued:

Monday, August 5, 2024

Agency Reviewed / Investigated:

Submitting OIG-Specific Report Number:

MAR-24-07

Location(s):

Agency-Wide

Type of Report:

Review

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

Report updated under NDAA 5274:

View Document:

Attachment	Size
FISMA24FINALReportMAR2407v5PUBLIC.pdf	1.46 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation
1	Open	No
Perform a risk-based allocation of resources based on system categorization.
2	Open	No
Incorporate the system level risk assessment results into the organization-wide cybersecurity and privacy risk assessment.
3	Open	No
Integrate the information security architecture with the development lifecycle.
4	Open	No
Implement qualitative or quantitative measures to measure, report on, and monitor the information security and SCRM performance of organizationally defined products, systems, and services provided by external providers.
5	Open	No
Implement qualitative or quantitative measures used to gauge the effectiveness of its component authenticity policies and procedures and ensures that data supporting the metrics is obtained accurately, consistently, and in a reproducible format.
6	Open	No
Allocate resources in a risk-based manner.
7	Open	No
Implement qualitative or quantitative measures on the effectiveness of the configuration management plan.
8	Open	No
Ensure flaw remediation is centrally managed.
9	Open	No
Implement qualitative or quantitative measures on the effectiveness of change control activities.
10	Open	No
Deploy automation to centrally document, track, and share risk designations and screening information with necessary parties.

Recommendation Number

Recommendation Status

Significant Recommendation

Additional Details

Open

Open

Open

Open