Federal Communications Commission’s FY 2025 Federal Information Security Modernization Act Evaluation

Date Issued

Thursday, December 18, 2025

Submitting OIG

Federal Communications Commission OIG

Agencies Reviewed/Investigated

Federal Communications Commission

Report Number

25-EVAL-04-01

Report Type

Inspection / Evaluation

Agency Wide

Yes

Number of Recommendations

Questioned Costs

Funds for Better Use

Report updated under NDAA 5274

External Link

Open Recommendations

This report has 13 open recommendations.

Recommendation Number	Significant Recommendation	Recommended Questioned Costs	Recommended Funds for Better Use
1	No	$0	$0
Inadequate Cybersecurity Governance
2	No	$0	$0
Inadequate Cybersecurity Governance
8	No	$0	$0
Risk and Asset Management
9	No	$0	$0
Risk and Asset Management
10	No	$0	$0
Risk and Asset Management
11	No	$0	$0
Risk and Asset Management
12	No	$0	$0
Risk and Asset Management
19	No	$0	$0
Information Security Continuous Monitoring
21	No	$0	$0
Information Security Continuous Monitoring
22	No	$0	$0
Information Security Continuous Monitoring
23	No	$0	$0
USAC - Access Controls
26	No	$0	$0
USAC - Access Controls
27	No	$0	$0
USAC - Access Controls