Stay Informed
of New Reports
Twitter
Where To Report Waste
Fraud, Abuse, Or Retaliation
Where To Report Waste Fraud, Abuse, Or Retaliation

Audit of the Information Technology Security Controls of the U.S. Office of Personnel Management's Consolidated Business Information System

Submitting OIG: 
Office of Personnel Management OIG
Short / Alternative Report Title: 
Audit of IT Security Controls of US OPM's Consolidated Business Information System
Date Issued: 
Thursday, October 3, 2019
Agency Reviewed / Investigated: 
Office of Personnel Management
Submitting OIG-Specific Report Number: 
4A-CF-00-19-026
Component, if applicable: 
Information Technology
Location(s): 
Agency-Wide
Type of Report: 
Audit
Number of Recommendations: 
7
View Document: 
AttachmentSize
PDF icon 4A-CF-00-19-026 Final Report CBIS FISMA_Redacted.pdf1.26 MB

Related Open Recommendations

Recommendation Number Recommendation Status Significant Recommendation Additional Details
2 Open No
We recommend that the OCFO work with FAA to implement standard security configuration settings for all operating platforms in use by CBIS.
3 Open No
We recommend that the CBIS application meet the requirements of OMB M-11-11 by requiring multi-factor authentication using PIV credentials.
4 Open No
We recommend that OPM ensure system administrators receive incident response training for CBIS.
Displaying 3 of 3 Recommendations