FY 2022 FISMA DOL Information Security Report: DOL'S Information Security Program Not Remaining Current with Security Requirements

Date Issued

Friday, February 10, 2023

Submitting OIG

Department of Labor OIG

Other Participating OIGs

Department of Labor OIG

Agencies Reviewed/Investigated

Department of Labor

Report Number

23-23-001-07-725

Report Type

Audit

Agency Wide

Yes

Number of Recommendations

Questioned Costs

Funds for Better Use

Additional Details

Open Recommendations

This report has 2 open recommendations.

Recommendation Number	Significant Recommendation	Recommended Questioned Costs	Recommended Funds for Better Use
01	Yes	$0	$0
Update DOL entity-wide and system-level security policies, procedures, and plans to comply with NIST SP 800-53, Rev. 5.
5	Yes	$0	$0
Implement data loss prevention tools and alerts based on the results of agencies’ data exfiltration tests.