Report Waste, Fraud

Abuse, Or Retaliation

Consumer Product Safety Risk Management System Information Security Review Report

Submitting OIG:

Consumer Product Safety Commission OIG

Date Issued:

Monday, June 4, 2012

Agency Reviewed / Investigated:

Consumer Product Safety Commission

Location(s):

Agency-Wide

Type of Report:

Audit

Number of Recommendations:

8

View Document:

Attachment	Size
CPSC Risk Management System Information Security Review Report.pdf	308.29 KB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
1	Open	Yes
Identify the participants of the CPSC Risk Executive Council and define specific tasks/milestones for implementing the proposed Risk Management Framework.
2	Open	Yes
Develop an Enterprise Architecture that includes a comprehensive IT security architecture using the CIO Council's guidance and incorporate this into the Security Control Documents.
3	Open	No
Fully document the implementation of the security controls.
4	Open	No
Update the CPSRMS SSP to be the single authoritative system security document.
5	Open	No
Update the POAM to include the missing information, as required by OMB M-4-25.
6	Open	No
Perform an assessment to ensure the adequate categorization of information types.
7	Open	No
Analyze and document whether all of the information types outlined in the NIST 800-60 framework were appropriately included or excluded from the CPSRMS Security Categorization document.
8	Open	No
Define the specific Public Access controls in place/planned.