Open Recommendations
Recommendation Number | Significant Recommendation | Recommended Questioned Costs | Recommended Funds for Better Use | Additional Details | |
---|---|---|---|---|---|
1 | No | $0 | $0 | ||
The Chief Information Officer should ensure that separation of duty controls reflect NIST guidance and require that all cloud systems have a unique System Owner and AO or AO Designated Representative. | |||||
2 | No | $0 | $0 | ||
The Chief Information Officer should ensure that the cloud system immediately completes its pilot program and that an ATO memorandum is approved for the system to remain in production. | |||||
5 | No | $0 | $0 | ||
The Chief Information Officer should ensure that management approvals are consistent and documented per the requirements for cloud systems. |