What We Looked AtThe Federal Information Security Modernization Act of 2014 (FISMA) requires agencies to implement information security programs. FISMA also requires agencies to have annual independent evaluations performed to determine the effectiveness of their programs and report the results of these reviews to the Office of Management and Budget (OMB). To meet this requirement, the Surface Transportation Board (STB) requested that we perform its fiscal year 2020 FISMA review. We contracted with Williams Adley & Company-DC LLP (Williams Adley), an independent public accounting firm, to conduct this audit subject to our oversight. The audit objective was to determine the effectiveness of STB's information security program and practices in five function areas--Identify, Protect, Detect, Respond, and Recover.What We FoundWe performed a quality control review (QCR) of Williams Adley's report and related documentation. Our QCR disclosed no instances in which Williams Adley did not comply, in all material respects, with generally accepted Government auditing standards.RecommendationsSTB concurs with Williams Adley's six recommendations.
| Report Date | Agency Reviewed / Investigated | Report Title | Type | Location | |
|---|---|---|---|---|---|
| Surface Transportation Board | Quality Control Review of an Independent Auditor's Report on the Surface Transportation Board's Information Security Program and Practices | Audit | Agency-Wide | View Report | |
| U.S. Agency for International Development | Audit of the Fund Accountability Statement of Moona, The CO-LAB Project in West Bank and Gaza, Cooperative Agreement 294-A-16-00004, January 1 to December 31, 2018 | Other |
|
View Report | |
| U.S. Agency for International Development | Audit of the Fund Accountability Statement of Center for Media Development and Analysis, Under Multiple Awards in Bosnia and Herzegovina, January 1 to December 31, 2019 | Other |
|
View Report | |
| U.S. Agency for International Development | Examination of Costs Claimed for Natural Resources Consulting Engineers for the Two Fiscal Years Ended December 31, 2016 and 2017 | Other |
|
View Report | |
| Department of Agriculture | 2017 Emergency Assistance for Honeybee Claims | Audit | Agency-Wide | View Report | |
| Department of Agriculture | Wildfires and Hurricanes Indemnity Program | Audit | Agency-Wide | View Report | |
| Department of Agriculture | 2020 USDA Management Challenges | Top Management Challenges | Agency-Wide | View Report | |
| Architect of the Capitol | Audit of the Russell Senate Office Building Exterior Envelope Repair and Restoration, Seq. II, (Phases 2 and 4) Project’s Contract Modifications | Audit |
|
View Report | |
| Internal Revenue Service | Mainframe Computing Environment Security Needs Improvement | Audit | Agency-Wide | View Report | |
| Environmental Protection Agency | EPA Has Sufficiently Managed Emergency Responses During the Pandemic but Needs to Procure More Supplies and Clarify Guidance | Audit | Agency-Wide | View Report | |