Open Recommendations
| Recommendation Number | Significant Recommendation | Recommended Questioned Costs | Recommended Funds for Better Use | Additional Details | |
|---|---|---|---|---|---|
| 1 | No | $0 | $0 | ||
| KPMG recommends that the CIO develop and promulgate entity-wide security policies and procedures and assume more responsibility for the coordination and oversight of Program Offices in completing certification and accreditation and other information security requirements and activities. | |||||
| 2 | No | $0 | $0 | ||
| KPMG recommends that the CIO identify common controls, control responsibilities, boundaries and interconnections for information systems in its system inventory. | |||||