An official website of the United States government
Here's how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Brought to you by the Council of the Inspectors General on Integrity and Efficiency
Federal Reports
Report Date
Agency Reviewed / Investigated
Report Title
Type
Location
Office of the Director of National Intelligence
Office of the Inspector General of the Intelligence Community Semiannual Report, April 2022-September 2022
EAC OIG issued this advisory to alert EAC’s Interim Executive Director and Acting General Counsel about an identified risk. Specifically, EAC may be inadvertently providing inconsistent guidance to grantees and there is a risk that unallowable activities may be taking place because the terms “voter registration,” “voter education,” and “get-out-the-vote” (GOTV) are not defined in the Help America Vote Act of 2002. Also, EAC has not adopted its own formal definitions.
This memorandum transmits the management letter prepared by Allmond & Company, LLC to address an internal control weakness over financial reporting identified during the audit that did not have a material effect on the financial statements.
Our objective for this report was to assess the extent to which the company has controls to manage, distribute, track, and retrieve high-security keys.We observed that high-security keys are broadly available to the public and can surface in online and brick-and-mortar marketplaces, contributing to security and safety risks. Senior officials told us the company has measures in place to largely mitigate serious risks, but the availability of these keys could still give bad actors an opportunity to disrupt train operations, causing unnecessary delays and costs.We further observed that high-security keys are publicly available in part because the company has not consistently implemented controls over the distribution, tracking, and retrieval of them. Senior officials agreed the company may reduce its risk by better safeguarding its high-security keys going forward.We provided several considerations for the company to address the report’s observations to include assessing the risks associated with keys currently in circulation and implementing controls to mitigate them to the extent practical. In addition, Amtrak may want to consider developing a key management policy that institutes new controls and establishing a centralized mechanism for tracking high-security keys, such as key management software.
