Audit of the Railroad Retirement Board's Privacy Program

Date Issued

Friday, September 20, 2013

Submitting OIG

Railroad Retirement Board OIG

Other Participating OIGs

Railroad Retirement Board OIG

Agencies Reviewed/Investigated

Railroad Retirement Board

Report Number

13-11

Report Type

Audit

Agency Wide

Yes

Number of Recommendations

Questioned Costs

Funds for Better Use

Open Recommendations

This report has 4 open recommendations.

Recommendation Number	Significant Recommendation	Recommended Questioned Costs	Recommended Funds for Better Use
1	No	$0	$0
The Bureau of Information Services should work with the Office of Administration, Division of Acquisition Management, and the agency’s contracting officer’s representatives to maintain the Contractor Security Control Log, ensure that it is continually updated to reflect all contractors and their staff that work at the RRB, and indicate whether the contractor staff will have access to personally identifiable information or a system of records.
8	No	$0	$0
The Bureau of Information Services should develop a strategic organizational privacy plan that is multi-organizational and represents the Railroad Retirement Board as a whole.
10	No	$0	$0
The Bureau of Information Services should develop a policy on communication between bureaus regarding changes in personally identifiable information.
11	No	$0	$0
The Bureau of Information Services should develop a policy on the use and protection of personally identifiable information in testing, training, and research.