The Board Can Strengthen Inventory and Cybersecurity Life Cycle Processes for Cloud Systems

Submitting OIG:

Date Issued:

Wednesday, March 23, 2022

Agency Reviewed / Investigated:

Submitting OIG-Specific Report Number:

2022-IT-B-006

Location(s):

Agency-Wide

Type of Report:

Inspection / Evaluation

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

View Document:

Attachment	Size
board-cloud-systems-mar2022.pdf	932.18 KB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation
1	Open	No
Ensure that the Cloud Resource Center's inventory of cloud projects in the configuration and production phases is comprehensive and periodically maintained.
2	Open	No
Develop and implement a process to ensure that the FedRAMP Project Management Office has an accurate inventory of FedRAMP-approved cloud systems used by the Board.
3	Open	No
Ensure that the Board’s information security continuous monitoring standards and associated procedures provide consistent guidance on continuous monitoring frequencies and associated documentation review requirements for cloud service providers.