The Board Can Strengthen Inventory and Cybersecurity Life Cycle Processes for Cloud Systems

Date Issued

Wednesday, March 23, 2022

Submitting OIG

Federal Reserve Board & CFPB OIG

Other Participating OIGs

Federal Reserve Board & CFPB OIG

Agencies Reviewed/Investigated

Board of Governors of the Federal Reserve System

Report Number

2022-IT-B-006

Report Type

Inspection / Evaluation

Agency Wide

Yes

Number of Recommendations

Questioned Costs

Funds for Better Use

Open Recommendations

This report has 3 open recommendations.

Recommendation Number	Significant Recommendation	Recommended Questioned Costs	Recommended Funds for Better Use
1	No	$0	$0
Ensure that the Cloud Resource Center's inventory of cloud projects in the configuration and production phases is comprehensive and periodically maintained.
2	No	$0	$0
Develop and implement a process to ensure that the FedRAMP Project Management Office has an accurate inventory of FedRAMP-approved cloud systems used by the Board.
3	No	$0	$0
Ensure that the Board’s information security continuous monitoring standards and associated procedures provide consistent guidance on continuous monitoring frequencies and associated documentation review requirements for cloud service providers.