The Department of Homeland Security did not always terminate personal identity verification (PIV) card access or withdraw security clearances for separated employees and contractors in accordance with Federal regulations and Department policies.
Open Recommendations
Recommendation Number | Significant Recommendation | Recommended Questioned Costs | Recommended Funds for Better Use | Additional Details | |
---|---|---|---|---|---|
1 | No | $0 | $0 | ||
We recommend that the DHS Chief Security Officer clarify policies and procedures to require managers to notify security officials to revoke personal identity verification cards and withdraw security clearances within a specific timeframe after individuals separate from DHS. | |||||
2 | No | $0 | $0 | ||
We recommend that the DHS Chief Security Officer strengthen internal processes to ensure accountability and oversight for all personal identity verification cards that are collected and destroyed when individuals separate from DHS. | |||||
3 | No | $0 | $0 | ||
We recommend that the DHS Chief Security Officer implement additional controls to ensure personal identity verification card revocation and card destruction are completed and recorded when individuals separate from DHS. | |||||
4 | No | $0 | $0 | ||
We recommend that the DHS Chief Security Officer implement controls to ensure DHS officials record security clearance withdrawal dates in the Integrated Security Management System when individuals separate from DHS. | |||||
5 | No | $0 | $0 | ||
We recommend that the DHS Chief Security Officer develop and implement a solution to verify and validate the personal identity verification card access termination process across the Department and a mechanism to monitor its effectiveness. | |||||
6 | No | $0 | $0 | ||
We recommend that the DHS Chief Security Officer develop and implement a solution to verify and validate the security clearance withdrawal process across DHS and a mechanism to monitor its effectiveness. |