Where To Report Waste

Fraud, Abuse, Or Retaliation

FY 2019 FISMA DOL Information Security Report Implementation of Security Tools Hindered by Insufficient Planning

Submitting OIG:

Department of Labor OIG

Date Issued:

Monday, December 23, 2019

Agency Reviewed / Investigated:

Department of Labor

Submitting OIG-Specific Report Number:

23-20-002-07-725

Location(s):

Agency-Wide

Type of Report:

Inspection / Evaluation

Number of Recommendations:

20

View Document:

Attachment	Size
23_20_002_07_725 FY19 DOL FISMA Report.pdf	2 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
5	Open	Yes
Develop and implement performance metrics for configuration management.
7	Open	Yes
Design and implement controls to monitor DOL assets for missing patches, service packs, hot fixes, and other software updates that are not associated with a CVE.
8	Open	Yes
Enhance vulnerability scanning monitoring controls and procedures to track and remediate outstanding vulnerabilities in a timely manner.
11	Open	Yes
Finalize the implementation of the access control technologies.
15	Open	Yes
Implement data encryption configurations/solutions at the server level for data at rest for sensitive information (PII).