MCC Generally Implemented an Effective Information Security Program for Fiscal Year 2023 in Support of FISMA

Submitting OIG:

Date Issued:

Tuesday, September 5, 2023

Agency Reviewed / Investigated:

Submitting OIG-Specific Report Number:

A-MCC-23-002-C

Location(s):

United States

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

Report updated under NDAA 5274:

View Document:

Attachment	Size
MCC-23-002-C.pdf	561.71 KB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
1	Open
Update the agency’s policies and procedures to reflect security controls identified in National Institute of Standards and Technology Special Publication 800-53, Revision 5.
2	Open
Develop and implement a plan for Millenium Challenge Corporation’s security assessments to be updated.
3	Open
Implement level 2 event logging requirements in accordance with Office of Management and Budget memorandum M-21-31.
4	Open
Develop and implement a process to make periodic updates to the Millenium Challenge Corporation’s business impact assessments.