National Credit Union Administration Federal Information Security Modernization Act of 2014 Audit—Fiscal Year 2020

This audit report is the National Credit Union Administration (NCUA) Office of the Inspector General’s (OIG) independent evaluation of the effectiveness of the NCUA's information security program and practices for fiscal year 2020. The OIG engaged CliftonLarsonAllen LLP (CLA) to perform this evaluation. The contract required that this evaluation be performed in conformance with generally accepted government auditing standards issued by the Comptroller General of the United States. The OIG monitored CLA’s performance under this contract. This report summarizes the results of CLA’s independent evaluation and contains two recommendations that will assist the agency in improving the effectiveness of its information security and its privacy programs and practices. NCUA management concurred with and has planned corrective actions to address the recommendations.