An official website of the United States government
Here's how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Brought to you by the Council of the Inspectors General on Integrity and Efficiency
Federal Reports
Report Date
Agency Reviewed / Investigated
Report Title
Type
Location
Department of Homeland Security
CISA Faces Challenges Sharing Cyber Threat Information as Required by the Cybersecurity Act of 2015
The Cybersecurity and Infrastructure Security Agency (CISA) addressed the basic information-sharing requirements of the Cybersecurity Act of 2015. In calendar years 2021 and 2022, CISA updated its guidance, properly classified cyber threat indicators (CTI) and defensive measures, and accurately accounted for security clearances to address the basic information-sharing requirements of the Act. In March 2022, CISA completed upgrades to its Automated Indicator Sharing (AIS) 2.0 capability to address information-sharing limitations.
U.S. Immigration and Customs Enforcement (ICE) did not effectively manage and secure its mobile devices or the infrastructure supporting the devices. Specifically, ICE did not implement security settings required to protect its mobile devices and did not mitigate vulnerabilities from applications installed on these devices. In addition, ICE did not use its Mobile Device Management software and other threat defense tools to fully manage and secure some mobile devices and did not address vulnerabilities within the Mobile Device Management software and the servers supporting it. Further, ICE did not implement increased monitoring and protection for devices used outside the United States, which were at a higher risk of cyberattacks. Finally, ICE did not always perform required steps to reduce risks associated with disposal, loss, or theft of its mobile devices.
We performed this review to determine whether the Lower Kuskokwim School District expended Elementary and Secondary School Emergency Relief (ESSER) grant funds for allowable purposes in accordance with applicable requirements. We determined that all the ESSER expenditures we reviewed for Lower Kuskokwim were allowable and in accordance with applicable requirements. We also found that Lower Kuskokwim complied with key Federal procurement requirements, including those covering the procurement methods to be followed and contract cost, price, and provisions, when procuring the goods or services associated with each ESSER expenditure we reviewed. Because we identified no exceptions, our report does not include recommendations. However, our results are limited to the ESSER expenditures we reviewed, and it is critical that any remaining ESSER funds continue to be used appropriately.
The objective of our audit was to determine whether the Oregon Department of Education (ODE) implemented selected components of its statewide accountability system in the fall of 2022 based on data for school year 2021–2022. We found that ODE implemented the indicators used to measure student academic achievement and school success, applied a system of annual meaningful differentiation, and identified public schools as needing additional support and improvement in the fall of 2022 in accordance with Oregon’s approved State plan and amendment and ODE’s policies and procedures. We also found that ODE allocated additional funding to local educational agencies (LEAs) with schools identified in the fall of 2022 as needing additional support based on data for school year 2021. Although ODE implemented the selected components of the statewide accountability system in accordance with Oregon’s State plan, it did not identify one school that should have been identified for additional support and. Additionally, ODE did not provide additional funding to one LEA with three schools that it identified as needing additional support. Finally, ODE did not keep records showing how it calculated the amount of Title I funds reserved under section 1003 of the Elementary and Secondary Education Act that each LEA should receive or records showing that it provided additional support services, such as ongoing professional learning and networking, technical assistance, and coaching, to LEAs with schools that it identified as needing improvement. We recommend that the U.S. Department of Education verify that ODE provided additional funding, support services, or both, to the LEAs that should have received them; designed and implemented policies and procedures for calculating the amount of reserved Title I funds to allocate to LEAs with schools identified as needing additional support; and is keeping records showing how it is calculating the amount of funds provided to each LEA and showing that it is delivering the additional support services that it promised the LEAs and schools.
To obtain further information about this Classified or Sensitive but Unclassified Report, please contact the OIG Office of Counsel at OIGCounsel@oig.treas.gov, (202) 927-0650, or by mail at Office of Treasury Inspector General, 1500 Pennsylvania Avenue, Washington DC. 20220.
Agreed-Upon Procedures—Employee Benefits, Withholdings, Contributions, and Supplemental Semiannual Headcount Reporting Submitted to the Office of Personnel Management for Fiscal Year 2024
USDA OIG performed agreed-upon procedures as required on Federal employee benefits enrollment information as of August 31, 2024. Our review included information submitted from the Departments of Agriculture, Commerce, Homeland Security, Housing and Urban Development, Justice, Labor, and Treasury, as well as the Small Business Administration and the United States Agency for International Development.
Objective: To determine whether the Social Security Administration’s employees fully developed work activity and earnings for Old-Age, Survivors, and Disability Insurance disability claimants at the initial and reconsideration levels of the application process.