FISMA: IAF's Information Security Program for Fiscal Year 2024 Was Effective, Although Improvements Are Recommended

Submitting OIG:

Date Issued:

Friday, August 23, 2024

Agency Reviewed / Investigated:

Submitting OIG-Specific Report Number:

A-IAF-24-002-C

Location(s):

United States

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

Report updated under NDAA 5274:

View Document:

Attachment	Size
IAF-24-002-C.pdf	1.08 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
1	Open
We recommend that IAF’s chief information officer develop and implement a plan, including tools and other resources, to remediate critical and high vulnerabilities within the timeframes specified in the agency’s “Information System Security Program Standard Operating Procedures” (February 2022).
2	Open
We recommend that IAF’s chief information officer update the agency’s system security plan to include controls in National Institute of Standards and Technology Special Publication 800-53, Revision 5, “Security and Privacy Controls for Information Systems and Organizations.”