U.S. Department of Agriculture, Office of the Chief Information Officer, Fiscal Year 2024 Federal Information Security Modernization Act

Submitting OIG:

Department of Agriculture OIG

Report Description:

As required by FISMA, OIG reviewed USDA’s ongoing efforts to improve its information technology security program and practices during FY 2024.

Date Issued:

Thursday, July 25, 2024

Agency Reviewed / Investigated:

Department of Agriculture

Submitting OIG-Specific Report Number:

50503-0013-12

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

Report updated under NDAA 5274:

View Document:

Attachment	Size
450503-0013-12FR-508redactedpublicsigned.pdf	3.75 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation
1	Open	Yes
We recommend Departmental Administration Information Technology Office management establish additional oversight controls to ensure interconnection security agreements are reviewed on an annual basis and signed every three years.
2	Open	Yes
We recommend Departmental Administration Information Technology Office management establish a system of quality control to ensure the information entered in the assessment and authorization tool is accurate and reflective of a systems’ actual control environment.
3	Open	Yes
We recommend Departmental Administration Information Technology Office management enforce the timely completion and update of all security artifacts, including Plan of Actions and Milestones.
4	Open	Yes
USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.
5	Open	Yes
USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.
6	Open	Yes
USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.
7	Open	Yes
USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.
8	Open	Yes
USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.
9	Open	Yes
USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.
10	Open	Yes
We recommend Departmental Administration Information Technology Office management promptly address system vulnerabilities in accordance with Departmental Directive 3530-006.

Recommendation Number

Recommendation Status

Significant Recommendation

Additional Details

Open

Yes

We recommend Departmental Administration Information Technology Office management establish additional oversight controls to ensure interconnection security agreements are reviewed on an annual basis and signed every three years.

Open

Yes

We recommend Departmental Administration Information Technology Office management establish a system of quality control to ensure the information entered in the assessment and authorization tool is accurate and reflective of a systems’ actual control environment.

Open

Yes