The Federal Information Security Modernization Act (FISMA) requires that the Office of Inspector General (OIG) reviews the Small Business Administration’s (SBA’s) information security program. To determine SBA’s compliance with FISMA, OIG contracted with an independent public accountant, KPMG, to perform review procedures relating to FISMA. OIG monitored KPMG’s work and reported SBA’s compliance with FISMA in the Agency FISMA filings in October 2018. We also assessed the Agency’s progress in implementing open recommendations and compared our current year assessment with our fiscal year 2017 FISMA evaluation. In addition to the 5 open FISMA recommendations noted in appendix II, OIG made 18 new recommendations to address FISMA-related vulnerabilities. SBA fully agreed with all 18 recommendations.
Report File
Date Issued
Submitting OIG
Small Business Administration OIG
Other Participating OIGs
Small Business Administration OIG
Agencies Reviewed/Investigated
Small Business Administration
Report Number
19-09
Report Description
Report Type
Audit
Agency Wide
Yes
Number of Recommendations
18