The Enterprise Physical Access Control System Implementation and Physical Security Controls Need Improvement

Submitting OIG:

Date Issued:

Wednesday, September 27, 2023

Agency Reviewed / Investigated:

Submitting OIG-Specific Report Number:

2023-20-062

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

Report updated under NDAA 5274:

View Document:

Attachment	Size
202320062fr.pdf	942.54 KB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation
1	Open	No
The Chief, FMSS, should update the EPACS Operations Guide to provide clarity on granting and disabling operator accounts and the specific entitlements that are required in the BEARS for all EPACS roles.
2	Open	No
The Chief Information Officer should ensure that the Cybersecurity function’s Enterprise Security Audit Trails team in collaboration with the ACM team prioritizes completing the Audit Worksheet so that the audit logs can be monitored and reviewed.
3	Open	No
Ensure that all 1,286 noncompliant card readers are replaced with Federally compliant card readers and are properly configured.
5	Open	No
Determine the cause for the inoperable alarm at Site 6 and resolve the issue to enable alarms to appear in the EPACS Event Viewer.
6	Open	No
Establish a process to monitor the EPACS Event Viewer and timely resolve actionable alarms at all facilities with EPACS implemented, as required.