What We Looked AtThe Federal Information Security Modernization Act of 2014 (FISMA) requires agencies to implement information security programs. FISMA also requires agencies to have annual independent evaluations performed to determine the effectiveness of their programs and report the results of these reviews to the Office of Management and Budget (OMB). To meet this requirement, the Surface Transportation Board (STB) requested that we perform its fiscal year 2021 FISMA review. We contracted with Williams Adley & Company-DC LLP (Williams Adley), an independent public accounting firm, to conduct this audit subject to our oversight. The audit objective was to determine the effectiveness of STB’s information security program and practices in five function areas—Identify, Protect, Detect, Respond, and Recover. What We FoundWe performed a quality control review (QCR) of Williams Adley’s report and related documentation. Our QCR disclosed no instances in which Williams Adley did not comply, in all material respects, with generally accepted Government auditing standards. RecommendationsSTB concurs with Williams Adley’s 27 recommendations.
| Report Date | Agency Reviewed / Investigated | Report Title | Type | Location | |
|---|---|---|---|---|---|
| Surface Transportation Board | Quality Control Review of an Independent Auditor’s Report on the Surface Transportation Board’s Information Security Program and Practices | Audit | Agency-Wide | View Report | |
| Federal Labor Relations Authority | Semiannual Report to the Congress April 1, 2021-September 30, 2021 | Semiannual Report | Agency-Wide | View Report | |
| Election Assistance Commission | Oversight Plan for Fiscal Year 2022 | Other | Agency-Wide | View Report | |
| Election Assistance Commission | Office of Inspector General Strategic Plan (Updated) 2022-2026 | Other | Agency-Wide | View Report | |
| Office of Personnel Management | Investigative Activities Quarterly Case Summary FY 2021 Q4 | Other | Agency-Wide | View Report | |
| Department of Health & Human Services | Medicare Overpaid More Than $636 Million for Neurostimulator Implantation Surgeries | Audit | Agency-Wide | View Report | |
| Government Publishing Office | GPO OIG Top Management Challenges | Top Management Challenges | Agency-Wide | View Report | |
| Federal Election Commission | FEC OIG FY 2022 Work Plan | Other | Agency-Wide | View Report | |
| Department of Transportation | Semiannual Report to Congress: April 1, 2021 - September 30, 2021 | Semiannual Report | Agency-Wide | View Report | |
| U.S. Agency for International Development | USAID OIG Semiannual Report to Congress: April 1, 2021-September 30, 2021 | Semiannual Report | Agency-Wide | View Report | |