We identified internal control weaknesses in the system that increase the risk that Virginia will be unable to prevent or detect unauthorized access and disclosure of personally identifiable information. Specifically, we found that although Virginia classified the Single Sign-on Web System as a sensitive system, it did not ensure that it met the minimum State requirements for a system classified as sensitive. This meant thatVirginia also was not in compliance with the Statewide Longitudinal Data Systems grant requirements. We determined that Virginia has policies and procedures that address reporting and responding to unauthorized access and disclosure of data, but we could not determine whether Virginia effectively implemented the procedures because Virginia has not reported any system breaches in the Virginia Longitudinal Data System or the Single Sign-on Web System.
Report Date | Agency Reviewed / Investigated | Report Title | Type | Location | |
---|---|---|---|---|---|
Department of Education | Protection of Personally Identifiable Information in the Commonwealth of Virginia’s Longitudinal Data System | Audit |
|
View Report | |
Department of Defense | Army Needs Greater Emphasis on Inventory Valuation | Audit | Agency-Wide | View Report | |
Department of Veterans Affairs | Review of Alleged Improper Contract Awards in OI&T's Service, Delivery, and Engineering Office | Audit | Agency-Wide | View Report | |
Department of the Interior | Investigation of FWS’ Mexican Gray Wolf Program | Investigation | Agency-Wide | View Report | |
Department of the Interior | Third-Party BOP Verifications in the Gulf of Mexico | Investigation | Agency-Wide | View Report | |
Department of the Interior | Investigation of False Reporting to the Office of Natural Resources Revenue | Investigation |
|
View Report | |
Department of the Interior | Investigation of an NPS Contractor for Allegations of False Claims and Statements | Investigation |
|
View Report | |
Pension Benefit Guaranty Corporation | Risk Advisory and Management’s Response - Multiemployer Bundled Administrative Expenses in Financial Assistance Requests | Other | Agency-Wide | View Report | |
Department of the Treasury | Audit Termination Memorandum –Treasury’s Securities Auction Program | Other | Agency-Wide | View Report | |
U.S. Postal Service | Market Dominant Billing Determinants: Standard Mail | Audit | Agency-Wide | View Report | |