Federal Reports

The Federal Information Security Modernization Act (FISMA) (Public Law 113-283) requires Federal agencies to have an annual independent evaluation of their information security programs and practices. This evaluation can be performed by either the agency’s Office of Inspector General (OIG) or by an independent external auditor, as determined by the OIG, to determine the effectiveness of such programs and practices. KPMG, an independent public accounting firm, performed the DOI fiscal year 2018 FISMA audit under a contract issued by the DOI and monitored by the OIG.KPMG reviewed information security practices, policies, and procedures at the DOI Office of the Chief Information Officer and 11 DOI bureaus and offices, and identified needed improvements in the areas of configuration management, identity and access management, data protection and privacy, contingency planning and incident response. KPMG made 18 recommendations related to these control weaknesses that were intended to strengthen the Department’s information security program, as well as those of the Bureaus and Offices. In its response to the draft report, the Office of the Chief Information Officer concurred with all recommendations and established a target completion date for each corrective action.

Williams, Adley & Company – DC LLP, under contract with DHS OIG, issued an Independent Accountant’s Report on U.S. Immigration and Customs Enforcement’s (ICE) fiscal year 2018 Performance Summary Report. ICE’s management prepared the Performance Summary Report (PSR) and related disclosures in accordance with the requirements of the Office of National Drug Control Policy’s Circular, Accounting of Drug Control Funding and Performance Summary, dated May 8, 2018 (the Circular). Williams Adley was unable to assess the accuracy of the number of products reported in Metric 2, “Number of counter-narcotics intelligence requests satisfied,” as part of the PSR. With the exception of the effects of this issue, Williams Adley is not aware of any material modifications that should be made to the PSR or the related assertions for the year ended September 30, 2018, in order for them to be in accordance with the requirements set forth in the Circular. Williams Adley did not make any recommendations as a result of its review.

The Office of Inspector General conducted an audit of the U.S. Patent and Trademark Office’s (USPTO’s) Trademark Next Generation (TMNG) system. Our audit objective was to determine whether USPTO provided effective oversight of TMNG implementation.