Audit of the U.S. Nuclear Regulatory Commission's Implementation of the Federal Information Security Modernization Act of 2014 for Fiscal Year 2023 Region II: Atlanta, Georgia

Submitting OIG:

Nuclear Regulatory Commission OIG

Date Issued:

Wednesday, February 21, 2024

Agency Reviewed / Investigated:

Nuclear Regulatory Commission

Submitting OIG-Specific Report Number:

OIG-24-A-04

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

Report updated under NDAA 5274:

View Document:

Attachment	Size
ROA-OIG-24-04-US-NRC-FISMA-Region-II-02132024SSC22124RJF.pdf	3.04 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation
1	Open	Yes
We recommend NRC management define and implement a process to conduct reviews and removal of unnecessary badged access for its Regions.
2	Open	Yes
We recommend NRC management remediate the Region II identified vulnerabilities in accordance with NRC’s defined timeframes and document risk acceptances with mitigating controls for vulnerabilities that cannot be remediated within the defined timeframes.

Nuclear Regulatory Commission OIG

Nuclear Regulatory Commission
Defense Nuclear Facilities Safety Board

The Office of the Inspector General at NRC established the Hotline program to provide NRC employees, other government employees, licensee/utility employees, contractor employees, and the public with a confidential means of reporting incidences of suspicious activity to the OIG concerning fraud, waste, abuse, employee or management misconduct, and retaliation for protected disclosures. Mismanagement of agency programs or danger to public health and safety may also be reported through the Hotline.

https://nrcoig.oversight.gov/

Search form

Audit of the U.S. Nuclear Regulatory Commission's Implementation of the Federal Information Security Modernization Act of 2014 for Fiscal Year 2023 Region II: Atlanta, Georgia

Related Open Recommendations