Fiscal Year 2024 Financial Statements Audit Management Letter

Date Issued

Friday, December 20, 2024

Submitting OIG

Export-Import Bank of the United States OIG

Agencies Reviewed/Investigated

Export-Import Bank

Report Number

OIG-AR-25-02

Report Type

Audit

Agency Wide

Yes

Number of Recommendations

Questioned Costs

Funds for Better Use

Report updated under NDAA 5274

Open Recommendations

This report has 5 open recommendations.

Recommendation Number	Significant Recommendation	Recommended Questioned Costs	Recommended Funds for Better Use
1	No	$0	$0
Enhance risk assessment procedures to enable proper identification of processes and controls over Guarantee Loan Cancellations to insure all loans canceled in [redacted language] are completely and accurately recorded in [redacted language].
2	No	$0	$0
Reinforce controls over the review of the subsidy rates inputted into [redacted language] to address gaps identified in this NFR.
3	No	$0	$0
Enhance processes and controls over insurance cancellations to ensure all transactions are recorded by [redacted language] and are completely and accurately recorded in [redacted language].
4	No	$0	$0
We recommend that EXIM management design and implement monitoring controls to help ensure that password configurations for the [redacted language] are in compliance with the Standard Operating Procedures for [redacted language] Procedures and NIST SP 800-53, Revision 5.1, Release 5.1.1.
5	No	$0	$0
We recommend that EXIM management design and implement monitoring controls to help ensure that access to develop and implement changes into production is appropriately segregated.