The Office of the Inspector General (OIG) contracted with Sikich CPA LLC (Sikich) to audit the Defense Nuclear Facilities Safety Board’s (DNFSB) Implementation of the Federal Information Security Modernization Act of 2014 for Fiscal Year 2025. The objective was to assess the effectiveness of the information security policies, procedures, and practices of the DNFSB. The findings and conclusions presented in this report are Sikich’s responsibility. The OIG’s responsibility was to oversee the contractor’s work in accordance with generally accepted government auditing standards.
Based on their review for the period of October 1, 2024, through June 30, 2025, Sikich found that the DNFSB has not established an effective agency-wide information security program and practices. There are weaknesses that impact the agency’s ability to protect the DNFSB’s systems and information adequately.
As a result of the weaknesses noted in this audit, Sikich made seven new recommendations to assist the DNFSB in strengthening its information security program and practices in addition to the six prior-year recommendations that remain open.
