Stay Informed
of New Reports
Twitter
Where To Report Waste
Fraud, Abuse, Or Retaliation
Where To Report Waste Fraud, Abuse, Or Retaliation

Audit of the NRC’s Implementation of the Federal Information Security Modernization Act (FISMA) of 2014 for Fiscal Year 2022

Related Open Recommendations

Recommendation Number Recommendation Status Significant Recommendation Additional Details
2 Open No Implement a process to verify that remaining external interconnections
Implement a process to verify that remaining external interconnections noted in the ITI Core Services SSP have documented, up-to-date ISA/MOUs or SLAs in place as applicable.
4 Open No Document and implement a periodic review of subsystem inventories
Document and implement a periodic review of subsystem inventories to verify information maintained for each ITI subsystem is current, complete, and accurate.
6 Open No Complete annual security awareness
Implement a process to validate that all personnel with privileged level responsibilities complete annual security awareness and role-based training.
7 Open No Validate that all new contractors complete their initial security training
Implement a process to validate that all new contractors complete their initial security training requirements and acknowledgement of rules of behavior prior to accessing the NRC environment and to subsequently ensure completion of annual security awareness training and renewal of rules of behavior is tracked.
Displaying 4 of 4 Recommendations