Submitting OIG:
Report Description:
We determined that DHS' information security program for Top Secret/Sensitive Compartmented Information intelligence systems is effective this year as the Department achieved “Level 4 – Managed and Measurable” in three of five cybersecurity functions, based on current reporting instructions for intelligence systems. However, we identified deficiencies in DHS’ overall patch management process and the Cybersecurity and Infrastructure Security Agency’s weakness remediation and security awareness training activities. We made one recommendation to the Office of Intelligence and Analysis and two recommendations to the Cybersecurity and Infrastructure Security Agency to address the deficiencies identified. DHS concurred with all three recommendations.
Date Issued:
Thursday, March 21, 2019
Agency Reviewed / Investigated:
Submitting OIG-Specific Report Number:
OIG-19-34
Component, if applicable:
Office of Intelligence and Analysis (I&A)
Location(s):
United States
Type of Report:
Audit
Questioned Costs:
$0
Funds for Better Use:
$0
Number of Recommendations:
3
View Document:
Attachment | Size |
---|---|
OIG-19-34-UNSUM-Mar19.pdf | 195.26 KB |
Additional Details Link: