NATIONAL CREDIT UNION ADMINISTRATION FEDERAL INFORMATION SECURITY MODERNIZATION ACT OF 2014 AUDIT - FISCAL YEAR 2023

Submitting OIG:

National Credit Union Administration OIG

Report Description:

This report summarizes the results of CLA’s independent evaluation and contains two recommendations that will assist the agency in improving the effectiveness of its information security and its privacy programs and practices. NCUA management concurred with and has identified corrective actions to address the recommendations.

Date Issued:

Thursday, September 14, 2023

Agency Reviewed / Investigated:

National Credit Union Administration

Submitting OIG-Specific Report Number:

OIG-23-08

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

Report updated under NDAA 5274:

View Document:

Attachment	Size
NCUA-FISMA-FY2023-Redacted.pdf	740.67 KB

Additional Details Link:

https://ncua.gov/files/audit-reports/oig-audit-compliance-fisma-2023.pdf

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
1. OIG-23-08 Recommendation	Open	No	NATIONAL CREDIT UNION ADMINISTRATION FEDERAL INFORMATION SECURITY MODERNIZATION ACT OF 2014 AUDIT - FISCAL YEAR 2023
Document and implement a process to validate that server policies and/or related automated scripts are configured and running as desired when introducing a new server to the NCUA information technology environment.
2. OIG-23-08 Recommendation	Open	No	NATIONAL CREDIT UNION ADMINISTRATION FEDERAL INFORMATION SECURITY MODERNIZATION ACT OF 2014 AUDIT - FISCAL YEAR 2023
Validate that the onboarding workflow is working properly between SharePoint and LAMP to ensure that new employees and contractors are completing the NCUA Rules of Behavior timely upon onboarding.

Recommendation Number

Recommendation Status

Significant Recommendation

Additional Details

1. OIG-23-08 Recommendation

Open

NATIONAL CREDIT UNION ADMINISTRATION FEDERAL INFORMATION SECURITY MODERNIZATION ACT OF 2014 AUDIT - FISCAL YEAR 2023

Document and implement a process to validate that server policies and/or related automated scripts are configured and running as desired when introducing a new server to the NCUA information technology environment.

2. OIG-23-08 Recommendation

Open

NATIONAL CREDIT UNION ADMINISTRATION FEDERAL INFORMATION SECURITY MODERNIZATION ACT OF 2014 AUDIT - FISCAL YEAR 2023

Validate that the onboarding workflow is working properly between SharePoint and LAMP to ensure that new employees and contractors are completing the NCUA Rules of Behavior timely upon onboarding.