IAF Generally Implemented an Effective Information Security Program for Fiscal Year 2023 in Support of FISMA

Submitting OIG:

Date Issued:

Monday, August 28, 2023

Agency Reviewed / Investigated:

Submitting OIG-Specific Report Number:

A-IAF-23-001-C

Location(s):

United States

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

Report updated under NDAA 5274:

View Document:

Attachment	Size
IAF-23-001-C.pdf	1.16 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
1	Open
We recommend that IAF’s chief information officer improve its record keeping process to maintain records of the first day its users access agency systems.
2	Open
We recommend that IAF’s chief information officer develop and implement procedures for compensating controls in lieu of multifactor authentication for systems that the agency plans to decommission.
3	Open
We recommend that IAF’s chief information officer implement level 2 event logging requirements in accordance with Office of Management and Budget memorandum M-21-31.