Audit of USITC’s Patching of Critical and High Vulnerabilities on the International Trade Commission Network

Submitting OIG:

Report Description:

The U.S. International Trade Commission’s (Commission) Office of Inspector General conducted this audit to determine if the Commission effectively patches critical and high vulnerabilities on the International Trade Commission Network, known as ITCNet. The ITCNet includes the hardware, software, applications, databases, communications, and Internet access to support the Commission’s mission and daily operations.

Date Issued:

Monday, September 19, 2022

Agency Reviewed / Investigated:

International Trade Commission

Submitting OIG-Specific Report Number:

OIG-AR-22-10

Component, if applicable:

U.S. International Trade Commission

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

View Document:

Attachment	Size
OIG-AR-22-10.pdf	1.62 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
OIG-AR-22-10.02	Open	No
Develop a process to: 1) verify that all authorized devices are being scanned or prioritized for scanning, 2) remove unauthorized devices from the network, 3) implement a tool or a process to monitor whether all authorized devices are being scanned, and 4) reconcile the authoritative list of systems approved to be on the network against the list of scanned devices at regular intervals for differences and keep the list up to date.

International Trade Commission OIG

International Trade Commission

About

The Office of the Inspector General (OIG) was established at the USITC in 1989 as a result of amendments to the Inspector General Act. The OIG is designed to be an independent and objective unit. The Inspector General reports regularly to the Commission and semiannually to the Congress.

Mission

The mission of the Office of the Inspector General is to promote and preserve the effectiveness, efficiency, and integrity of the U.S. International Trade Commission (USITC). General responsibilities include:

1. Conducts and supervises audits and investigations of USITC programs and operations,

2. Provides leadership and coordination and recommends policies for activities designed to promote the efficiency and effectiveness of USITC programs and operations,

3. Provides leadership and coordination and recommends policies for activities designed to prevent and detect fraud and abuse in the programs and operations of the USITC, and

4. Keeps the Chairman and the Congress fully and currently informed about problems and deficiencies relating to the administration of USITC and the necessity for and progress of corrective action.

https://www.usitc.gov/oig.htm

Search form

Audit of USITC’s Patching of Critical and High Vulnerabilities on the International Trade Commission Network

Related Open Recommendations