National Credit Union Administration Federal Information Security Modernization Act of 2014 Audit - Fiscal Year 2021

Submitting OIG:

National Credit Union Administration OIG

Report Description:

This report summarizes the results of CLA’s independent evaluation and contains seven recommendations that will assist the agency in improving the effectiveness of its information security and its privacy programs and practices.

Short / Alternative Report Title:

NCUA Federal Information Security Modernization Act of 2014 Audit of Fiscal Year 2021

Date Issued:

Monday, November 22, 2021

Agency Reviewed / Investigated:

National Credit Union Administration

Submitting OIG-Specific Report Number:

OIG-21-09

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

Report updated under NDAA 5274:

View Document:

Attachment	Size
OIG-21-09-NCUA-Federal-Information-Security-Modernization-Act-2014-Audit-FY2021-Final-Report.pdf	1.64 MB

Additional Details Link:

https://www.ncua.gov/files/audit-reports/oig-audit-compliance-fisma-2021.pdf

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
1. OIG-21-09 Recommendation	Open	No	National Credit Union Administration Federal Information Security Modernization Act of 2014 Audit—Fiscal Year 2021
Review the SCRM NIST guidance and update the SCRM plan, policies, and procedures to fully address supply chain risk management controls and practices.
2. OIG-21-09 Recommendation	Open	No	National Credit Union Administration Federal Information Security Modernization Act of 2014 Audit - Fiscal Year 2021
Document and implement a plan to deploy multifactor authentication to address increased risks with the large number of personnel teleworking without a PIV card during the pandemic.
6. OIG-21-09 Recommendation	Open	No	National Credit Union Administration Federal Information Security Modernization Act of 2014 Audit—Fiscal Year 2021
Upon issuance of the CUI policies, design and implement media marking to designate protection standards for safeguarding and/or disseminating agency information.
7. OIG-21-09 Recommendation	Open	No	National Credit Union Administration Federal Information Security Modernization Act of 2014 Audit—Fiscal Year 2021
Redacted

Recommendation Number

Recommendation Status

Significant Recommendation

Additional Details

1. OIG-21-09 Recommendation

Open

National Credit Union Administration Federal Information Security Modernization Act of 2014 Audit—Fiscal Year 2021

Review the SCRM NIST guidance and update the SCRM plan, policies, and procedures to fully address supply chain risk management controls and practices.

2. OIG-21-09 Recommendation

Open

National Credit Union Administration Federal Information Security Modernization Act of 2014 Audit - Fiscal Year 2021

Document and implement a plan to deploy multifactor authentication to address increased risks with the large number of personnel teleworking without a PIV card during the pandemic.