Review of IT Security Policies, Procedures, Practices, and Capabilities in Accordance with the Cybersecurity Act of 2015

The Cybersecurity Act of 2015 (the Act) requires that each office of inspector general (OIG) submit a report to Congress on the national security systems and systems that provide access to personally identifiable information (PII) operated by or on behalf of its department. The objective of this audit is to examine the IT security policies, procedures, practices, and capabilities—as defined in the Cybersecurity Act of 2015—for national security and PII systems.