Audit of NARA's Information Security Oversight Office

Date Issued

Thursday, June 27, 2024

Submitting OIG

National Archives and Records Administration OIG

Other Participating OIGs

National Archives and Records Administration OIG

Agencies Reviewed/Investigated

National Archives and Records Administration

Report Number

24-AUD-05

Report Type

Audit

Agency Wide

Yes

Number of Recommendations

Questioned Costs

Funds for Better Use

Open Recommendations

This report has 4 open recommendations.

Recommendation Number	Significant Recommendation	Recommended Questioned Costs	Recommended Funds for Better Use
3	No	$0	$0
Formally define and document in writing ISOO’s monitoring methodology to address at a minimum program risk, staff responsibilities, and monitoring of program performance.
4	No	$0	$0
Develop and implement written internal policies and procedures that provide clear guidelines and timelines for CUI program management and oversight processes.
5	No	$0	$0
Formally document processes in writing that detail ISOO personnel responsible for the preparation and regular review of CUI internal control activities and relevant risks.
6	No	$0	$0
Develop and document a CUI performance management and oversightplan (i.e., performance measures and controls that ensure compliance with relevant CUIpolicies and regulations) to address at a minimum staff responsibilities and frequency ofactivities performed.