Review of Personal Property Management System and Practices for Calendar Year 2017

Submitting OIG:

Consumer Product Safety Commission OIG

Date Issued:

Friday, May 31, 2019

Agency Reviewed / Investigated:

Consumer Product Safety Commission

Submitting OIG-Specific Report Number:

19-A-06 (CPSC)

Location(s):

Agency-Wide

Type of Report:

Inspection / Evaluation

Number of Recommendations:

View Document:

Attachment	Size
CPSC CY 2017 Personal Property_FINAL.pdf	237.97 KB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation
7	Open	No
Develop and implement controls to ensure that the data entered into PMS and IFS is accurate and consistent with CPSC policies and procedures.
8	Open	No
Develop procedures to review applicable regulations and laws on an annual basis in order to ensure the property management policies and procedures remain accurate and complete.
9	Open	No
Perform and document a formal analysis on the PMS operating environment and system mission to determine the appropriate system categorization for PMS.
10	Open	Yes
Upon a justifiable determination of the PMS system categorization, design, implement, and assess the PMS security controls and formally authorize PMS to operate in accordance with CPSC organizational security policies and procedures as well as other applicable government standards.
11	Open	No
Establish and implement POA&M management procedures to ensure that all identified security weaknesses, including PMS application-specific and inherited control weaknesses, are fully documented and tracked.
13	Open	No
Establish and implement POA&M management procedures to ensure that changes to estimated completion dates should be documented and reflected in the POA&M tracker.
14	Open	No
Estimated completion dates should be documented and reflected in the POA&M tracker.
15	Open	No
Perform and document a formal analysis of PMS’s operating environment and system mission to determine the appropriate risk level categorization for PMS.
16	Open	Yes
Upon a justifiable determination of PMS’s system categorization, design and implement standard procedures for requesting and approving user access to roles and resources in PMS.
20	Open	No
Perform and document a risk analysis to identify SoD conflicts that may exist between PMS and other CPSC systems.

Recommendation Number

Recommendation Status

Significant Recommendation

Additional Details

Open

Develop and implement controls to ensure that the data entered into PMS and IFS is accurate and consistent with CPSC policies and procedures.

Open

Develop procedures to review applicable regulations and laws on an annual basis in order to ensure the property management policies and procedures remain accurate and complete.

Open

Perform and document a formal analysis on the PMS operating environment and system mission to determine the appropriate system categorization for PMS.

Open

Yes