Our audit objective was to determine whether the U.S. Patent and Trademark Office has adequately managed its Active Directory to protect mission critical systems and data. Our review focused on fundamental security practices of Active Directory management and security control implementations of the servers hosting Active Directory .
Open Recommendations
Recommendation Number | Significant Recommendation | Recommended Questioned Costs | Recommended Funds for Better Use | Additional Details | |
---|---|---|---|---|---|
4 | No | $0 | $0 | ||
We recommend that the Under Secretary of Commerce for Intellectual Property and Director of the United States Patent and Trademark Office direct the Chief Information Officer to ensure PIV card technology compatibility with on-going and future system development for USPTO next-generation applications, and switch PIV enforcement to a per-user basis, when technically feasible. |