Federal Reports

During this semiannual reporting period, we issued five audit reports, one risk assessment report, and one investigative report. These reports included $375,688 in questioned costs and 34 recommendations to improve agency operations and award recipient’s stewardship of Federal funds. Through our audit follow-up process, we assisted the National Endowment for the Arts (Arts Endowment) staff and award recipients in clearing 29 recommendations based on corrective actions taken. In addition, we addressed eight new hotline complaints, with one from this period and two from a prior reporting period remaining open. During this reporting period, we also focused internally to improve our operations by updating our Strategic Plan and initiating updates to our website. The website is being updated to make it easier to navigate and to ensure it includes links to the most current awards management resources. The updates to the website are designed to help award recipients comply with requirements and the Arts Endowment improve their programs and operations. The value-added work that my staff accomplished this period is due to their commitment to excellence, continued growth, and dedicated work effort, along with the support of the Arts Endowment Chairman and her staff. I look forward to continuously working with my staff, the Chairman, and her staff in promoting economy, efficiency, and effectiveness while helping to ensure integrity, excellence, and value in the delivery of the Arts Endowment mission.

FEC OIG's Semiannual Report to Congress April 1, 2020 - September 30, 2020

Semi Annual Report to Congress from April 2020 thru Sept 2020

Seek link below for the full report, report summary, multimedia or any agency follow-up.

The objective of the evaluation was to assess the effectiveness of the Commission’s security program and practices across key functional areas as of September 30, 2020. The Commission made progress through implementation of security policies, procedures, and strategies, but lacked quantitative and qualitative measures to assess them. During FY20, there were six findings and nine corresponding recommendations regarding the Commission’s information security program including: 1. Vulnerabilities not being remediated in a timely manner; 2. Security assessment plan and security assessment report not documented during annual assessment exercises; 3. Back-up data not stored with encryption; 4. Inactive accounts not automatically disabled after 90 days of inactivity; 5. Mobile device usage policy in draft and not finalized, approved or distributed as of year-end and 6. Enterprise Architecture Policy is currently in draft and not finalized, approved or disseminated. The overall assessment of the Commission’s FY2020 information security program was deemed effective because the tested, calculated and assessed maturity levels across the functional and domain areas received an overall rating of effective. The Commission implemented the three open prior year recommendations and the report provides nine new recommendations corresponding to six new findings.