Performance Audit of the U.S. Equal Employment Opportunity Commission (EEOC) Federal Information Security Modernization Act of 2014 (FISMA) For Fiscal Year 2021

The Office of Inspector General (OIG) contracted with the independent certified public accountingfirm of Harper, Rains, Knight & Company, P.A. (HRK) to conduct a performance audit of EEOC’sinformation security program and practices in accordance with the Federal Information SecurityModernization Act of 2014 (FISMA). The contract required HRK conduct the audit in accordancewith U.S. generally accepted government auditing standards (GAGAS) contained in GovernmentAuditing Standards, issued by the Comptroller General of the United States.The objective of this performance audit was to assess the effectiveness of the EEOC’s informationsecurity program and practices for the period October 1, 2020 through September 30, 2021. HRKfound that EEOC has established and maintained an effective information security program andpractices, consistent with applicable guidance. HRK has identified areas of improvement in theform of findings and recommendations. EEOC’s management was given the opportunity to reviewthe draft report. Management’s responses are included in the report.