FINANCIAL MANAGEMENT: Management Letter for the Audit of the Bureau of Engraving and Printing's Financial Statements for Fiscal Years 2022 and 2021

Submitting OIG:

Department of the Treasury OIG

Date Issued:

Friday, December 16, 2022

Agency Reviewed / Investigated:

Department of the Treasury

Submitting OIG-Specific Report Number:

OIG-23-015

Component, if applicable:

Bureau of Engraving and Printing

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

View Document:

Attachment	Size
OIG-23-015-web-copy.pdf	559.38 KB

Recommendation Number	Recommendation Status	Significant Recommendation
1-1	Open	Yes
Bureau of Engraving and Printing (BEP) management implement a sufficient security management control for the BEP Local Area Network / Wide Area Network (LAN WAN) that includes adding identified vulnerabilities to Plans of Action and Milestones (POA&Ms) in a timely manner in accordance with the documented Vulnerability Management Standard.
1-2	Open	Yes
Bureau of Engraving and Printing (BEP) management remediate vulnerabilities that are added to Plans of Action and Milestones (POA&Ms) in a timely manner, in line with TD P 85-01 and NIST 800-53 guidance (FY2021 recommendation).
2-1	Open	Yes
Bureau of Engraving and Printing (BEP) management ensure that all Active Directory Organization Units are captured in the automated script used to identify and disable Local Area Network / Wide Area Network (LAN WAN) accounts after 30 days of inactivity.
2-1	Open	Yes
Bureau of Engraving and Printing (BEP) management enforce existing requirements to disable inactive Local Area Network / Wide Area Network (LAN WAN) user accounts in accordance with the threshold established by policy.
3-1	Open	Yes
Bureau of Engraving and Printing (BEP) management design its control activities related to the monthly reconciliation of the cash accounts to include documentation of the reconciliation of the month end cash account 101000 balance to Treasury’s Central Accounting Reporting System (CARS).
3-2	Open	Yes
Bureau of Engraving and Printing (BEP) management enhance training and existing monitoring procedures to ensure internal controls over the monthly cash reconciliation are implemented as designed.
4-1	Open	Yes
Bureau of Engraving and Printing (BEP) management provide Project Managers, Program Managers, and Accounting Officers with ongoing training and enhance existing monitoring procedures to ensure internal controls over the Quarterly Review of Capital Projects in Construction in Progress are implemented as designed.

Recommendation Number

Recommendation Status

Significant Recommendation

Additional Details

1-1

Open

Yes

Bureau of Engraving and Printing (BEP) management implement a sufficient security management control for the BEP Local Area Network / Wide Area Network (LAN WAN) that includes adding identified vulnerabilities to Plans of Action and Milestones (POA&Ms) in a timely manner in accordance with the documented Vulnerability Management Standard.

1-2

Open

Yes

Bureau of Engraving and Printing (BEP) management remediate vulnerabilities that are added to Plans of Action and Milestones (POA&Ms) in a timely manner, in line with TD P 85-01 and NIST 800-53 guidance (FY2021 recommendation).