Fiscal Year 2022 Independent Evaluation of the SEC’s Implementation of the Federal Information Security Modernization Act of 2014, Report No. 574

Submitting OIG:

Report Description:

Date Issued:

Tuesday, November 15, 2022

Agency Reviewed / Investigated:

Location(s):

Agency-Wide

Type of Report:

Inspection / Evaluation

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

View Document:

Attachment	Size
FY-2022-Independent-Evaluation-SEC-Implementation-FISMA-2014-Report-No-574.pdf	1.27 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation
1	Open	Yes
Consistently implement its process for [REDACTED] listed in System Security Plans for outdated or inaccurate [REDACTED]as part of the agency’s annual System Security Plan reviews in order to ensure the consistent maintenance of a comprehensive and accurate inventory of [REDACTED].
2	Open	Yes
Develop, document, and implement a process for documenting the results of privacy risk assessments into the agency’s [REDACTED].
3	Open	Yes
Develop and implement a process to [REDACTED].
4	Open	Yes
Develop and define policies and procedures to ensure adherence to its cybersecurity and supply chain risk management requirements for external providers within the agency’s Supply Chain Risk Management Strategy.
5	Open	Yes
: Develop and implement a process to deploy [REDACTED].
6	Open	Yes
Implement the defined processes for [REDACTED].
7	Open	Yes
Develop and implement a process, including the timelines, [REDACTED].
8	Open	Yes
Develop a process for conducting [REDACTED] in order to manage and measure the effectiveness of the agency’s [REDACTED].
9	Open	Yes
Document and integrate [REDACTED].
10	Open	Yes
Develop a process to consistently implement [REDACTED].

Recommendation Number

Recommendation Status

Significant Recommendation

Additional Details

Open

Yes

Open

Yes

Open

Yes