On 18 December 2015, Congress enacted the Cybersecurity Information Sharing Act of 2015 (6 U.S.C. § 1501 et seq.) (the Act) to improve cybersecurity in the United States through enhanced sharing of cyber threat information. The Act creates a framework to facilitate and promote the voluntary sharing of cyber threat indicators (CTIs) and defensive measures (DMs) among Federal and between Federal and non-Federal entities. The Act required the Inspectors General of the “appropriate Federal entities,”
defined as the Departments of Commerce, Defense, Energy, Homeland Security, Justice, and the Treasury, and the Office of the Director of National Intelligence, in consultation with the Inspector General of the Intelligence Community, and the Council of Inspectors General on Financial Oversight, to jointly report to Congress by 18 December every two years, on the actions of the appropriate Federal entities to carry out the Act over the most recent two-year period. This report meets the biennial joint reporting requirement.
| Report Date | Agency Reviewed / Investigated | Report Title | Type | Location | |
|---|---|---|---|---|---|
| Office of the Director of National Intelligence | Interagency Joint Report on Compliance with the Cybersecurity Information Sharing Act of 2015 - Calendar Years 2023 and 2024 | Other | Agency-Wide | View Report | |
| National Science Foundation | Performance Audit of NSF’s Information Security Program for Fiscal Year 2025 | Audit | Agency-Wide | View Report | |
| Millennium Challenge Corporation | Audit of Millennium Challenge Corporation's (MCC's) Financial Statements for Fiscal Year 2025 | Audit |
|
View Report | |
| Gulf Coast Ecosystem Restoration Council | Audit of the Gulf Coast Ecosystem Restoration Council’s Financial Statements for Fiscal Year 2025 | Audit | Agency-Wide | View Report | |
| Railroad Retirement Board | Report on the Railroad Retirement Board’s Financial Statements Fiscal Year 2025 | Audit | Agency-Wide | View Report | |
| Department of Defense | (U) Audit of Cyber Protection Team Readiness Reporting | Audit | Agency-Wide | View Report | |
| Federal Communications Commission | Audit of Federal Communications Commission’s FY 2025 Financial Statements | Audit | Agency-Wide | View Report | |
| Federal Communications Commission | Federal Communications Commission’s FY 2025 Federal Information Security Modernization Act Evaluation | Inspection / Evaluation | Agency-Wide | View Report | |
| Small Business Administration | Report on the Most Serious Management and Performance Challenges by Office of Inspector General Fiscal Year 2026 | Top Management Challenges | Agency-Wide | View Report | |
| Federal Election Commission | FEC OIG Semiannual Report to Congress | Semiannual Report | Agency-Wide | View Report | |
