Fiscal Year 2021 Evaluation of the Smithsonian Institution's Information Security Program

Submitting OIG:

Report Description:

The Smithsonian Office of the Inspector General contracted with Castro & Company, LLC to evaluate the effectiveness of the Smithsonian's information security program in fiscal year 2021.

Date Issued:

Friday, June 24, 2022

Agency Reviewed / Investigated:

Smithsonian Institution

Submitting OIG-Specific Report Number:

OIG-A-22-05

Component, if applicable:

Office of the Chief Information Officer

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

View Document:

Attachment	Size
OIG-22-05.pdf	4.88 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation
OIG-A-22-05-02	Open	Yes
Strengthen existing assessment and authorization procedures to ensure security controls are appropriately selected and control descriptions within system security plans are accurately documented and maintained.
OIG-A-22-05-04	Open	Yes
Develop, document, and fully implement controls to ensure failures identified in baseline compliance scans are addressed in accordance with established Smithsonian policy.

Recommendation Number

Recommendation Status

Significant Recommendation

Additional Details

OIG-A-22-05-02

Open

Yes

Strengthen existing assessment and authorization procedures to ensure security controls are appropriately selected and control descriptions within system security plans are accurately documented and maintained.

OIG-A-22-05-04

Open

Yes

Develop, document, and fully implement controls to ensure failures identified in baseline compliance scans are addressed in accordance with established Smithsonian policy.

Search form

Fiscal Year 2021 Evaluation of the Smithsonian Institution's Information Security Program

Related Open Recommendations