Where To Report Waste

Fraud, Abuse, Or Retaliation

NIH Generally Implemented System Controls Over the Sequence Read Archive But Some Improvements Needed

Submitting OIG:

Department of Health & Human Services OIG

Date Issued:

Wednesday, February 7, 2024

Agency Reviewed / Investigated:

Department of Health & Human Services

Submitting OIG-Specific Report Number:

A-18-22-03300

Component, if applicable:

National Institutes of Health

Location(s):

DC

United States

Type of Report:

Audit

Questioned Costs:

$0

Funds for Better Use:

$0

Number of Recommendations:

3

Report updated under NDAA 5274:

No

View Document:

Attachment	Size
NIH-Generally-Implemented-System-Controls.pdf	1.51 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
24-A-18-041.01	Open	No
Brown & Company recommends that the NIH complete the security categorization in accordance with FIPS Pub 199 to include documenting results and supporting rationale in the security plan.
24-A-18-041.02	Open	No
Brown & Company recommends that the NIH conduct a system-level risk assessment for the SRA in accordance with NIST SP 800-53 requirements and NIH polices.
24-A-18-041.03	Open	No
Brown & Company recommends that the NIH ensure that the data normalization policy and procedures comply with Federal requirements to include defining roles and responsibilities.