We recommend that OPM perform an analysis to assess the risk of the 29 control deficiencies that were omitted from the CBIS risk assessment. OPM should update the CBIS risk assessment and POA&Ms to include all identified weaknesses and their risk levels.
Questioned Costs
$0
Funds for Better Use
$0
Recommendation Status
Closed
Source UUID
740184ee-a2b8-486b-b9af-20fd93a1ee4b-3
Report
Recommendation Number
3
Significant Recommendation
No