Federal Reports

What We Looked At The Federal Information Security Modernization Act of 2014 (FISMA) requires agencies to implement information security programs. FISMA also requires agencies to have annual independent evaluations performed to determine the effectiveness of their programs and report the results of these reviews to the Office of Management and Budget. To meet this requirement, the Surface Transportation Board (STB) requested that we perform its fiscal year 2024 FISMA review. We contracted with Williams Adley & Company-DC LLP, an independent public accounting firm, to conduct this audit subject to our oversight. The audit objective was to determine the effectiveness of STB’s information security program and practices in five function areas—Identify, Protect, Detect, Respond, and Recover. We performed a quality control review (QCR) of Williams Adley’s report and related documentation. What We Found Our QCR disclosed no instances in which Williams Adley did not comply, in all material respects, with generally accepted Government auditing standards. Our Recommendations STB concurs with Williams Adley’s audit’s findings and nine recommendations. 

The EPA failed to properly and timely disclose to the OIG unmistakable indicators of fraud against the EPA, the Clean Air Act, and the EPA's programs and operations by a business entity owner. As a result of the EPA's failure to properly disclose these indicators of fraud in a timely manner to the OIG, the U.S. Attorney's Office declined to pursue criminal charges against the business entity owner involved. Failure to disclose fraud, waste, and abuse, or other potential improper or illegal conduct involving an EPA program or operation can negatively impact the EPA's ability to fulfill its mission and ensure the soundness of, and confidence in, the EPA's programs and operations.