Audit of the National Credit Union Administration (NCUA) Continuity of Operations Program (COOP)

Submitting OIG:

National Credit Union Administration OIG

Report Description:

The National Credit Union Administration (NCUA) Office of Inspector General (OIG)conducted this self-initiated audit to assess the NCUA’s Continuity of Operations (COOP)program. Our objectives were to determine whether the NCUA’s COOP program was: (1) in accordance with applicable laws, regulations, policies, and procedures and (2) ready and able to execute should the need arise.

Short / Alternative Report Title:

Audit of the NCUA's Continuity of Operations Program (COOP)

Date Issued:

Friday, December 30, 2022

Agency Reviewed / Investigated:

National Credit Union Administration

Submitting OIG-Specific Report Number:

OIG-22-09

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

View Document:

Attachment	Size
OIG-22-09-Audit-NCUAs-Continuity-Operations-Program-COOPfinal-508.pdf	1.61 MB

Additional Details Link:

https://ncua.gov/files/audit-reports/oig-audit-ncua-continuity-operations-progra…

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
1. OIG-22-09 Recommendation	Open	No	Audit of the NCUA’s Continuity of Operations Program (COOP)
Perform a business impact analysis to define the IT network as essential and determine timelines for restoration to be used as a measurement for a full failover test of the NCUA IT network.
2. OIG-22-09 Recommendation	Open	No	Audit of the National Credit Union Administration (NCUA) Continuity of Operations Program (COOP)
Ensures the Chief Information Officer plans, conducts, and reports on a full failover test of the NCUA’s IT network to identify and correct any identified weaknesses.
3. OIG-22-09 Recommendation	Open	No	Audit of the NCUA’s Continuity of Operations Program (COOP)
Ensures the results of the failover test from Recommendation 2. (above) are communicated in writing to the NCUA Board, the Office of the Executive Director, and the Director, Office of Continuity and Security Management, to ensure the agency’s Continuity of Operations program and disaster recovery capabilities are thoroughly managed and reported on.

Recommendation Number

Recommendation Status

Significant Recommendation

Additional Details

1. OIG-22-09 Recommendation

Open

Audit of the NCUA’s Continuity of Operations Program (COOP)

Perform a business impact analysis to define the IT network as essential and determine timelines for restoration to be used as a measurement for a full failover test of the NCUA IT network.

2. OIG-22-09 Recommendation

Open

Audit of the National Credit Union Administration (NCUA) Continuity of Operations Program (COOP)

Ensures the Chief Information Officer plans, conducts, and reports on a full failover test of the NCUA’s IT network to identify and correct any identified weaknesses.