Where To Report Waste

Fraud, Abuse, Or Retaliation

Cybersecurity Information Sharing Act of 2015 Review Report

Submitting OIG:

Consumer Product Safety Commission OIG

Short / Alternative Report Title:

CPSC FY15 Cybersecurity Act Report

Date Issued:

Sunday, August 14, 2016

Agency Reviewed / Investigated:

Consumer Product Safety Commission

Location(s):

Agency-Wide

Type of Report:

Inspection / Evaluation

Number of Recommendations:

5

View Document:

Attachment	Size
Cybersecurity Act of 2015 Report FINAL 2 (8-9-16).pdf	280.91 KB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
1	Open	Yes
Management updates, develops, and publishes general access control and logical access control policies and procedures for all systems that permit access to PII.
2	Open	Yes
Provide training or document training completion by individual system owners on establishing, implementing, and maintaining logical access policies and procedures for systems that contain PII.
3	Open	No
The General Access Control Policy and attendant procedures should be updated to include the elements outlined in the report.
4	Open	Yes
Develop, document, and maintain a software inventory including license management policies and procedures.
5	Open	Yes
Comply with and enforce HSPD-12 multifactor authentication supported by the Personal Identity Verification Card.