Where To Report Waste

Fraud, Abuse, Or Retaliation

Federal Information Security Modernization Act Audit Fiscal Year 2019

Submitting OIG:

Office of Personnel Management OIG

Date Issued:

Tuesday, October 29, 2019

Agency Reviewed / Investigated:

Office of Personnel Management

Submitting OIG-Specific Report Number:

4A-CI-00-19-029

Component, if applicable:

Information Technology

Type of Report:

Audit

Questioned Costs:

$0

Funds for Better Use:

$0

Number of Recommendations:

47

View Document:

Attachment	Size
4a-ci-00-19-029.pdf	1.18 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
6	Open	No
We recommend that OPM define policies and procedures for a centralized software inventory.
18	Open	No
We recommend that OPM document the lessons learned from its configuration management activities and update its configuration management plan as appropriate.
23	Open	No
For OPM configuration standards that are based on a pre-existing generic standard, we recommend that OPM document all instances where the OPM-specific standard deviates from the recommended configuration setting.
35	Open	No
We recommend that OPM develop a process to routinely test the Data Breach Response Plan.
36	Open	No
We recommend that OPM identify individuals with heightened responsibility for PII and provide role-based training to these individuals at least annually.
46	Open	No
We recommend that the OCIO ensure that all of OPM's major systems have contingency plans in place and that they are reviewed and updated annually.
47	Open	No
We recommend that OPM test the contingency plans for each system on an annual basis.