Federal Reports

For our evaluation of the National Weather Service's (NWS's) protection of operational technology (OT), our objective was to determine whether NWS has implemented effective security controls for its critical OT. We found that I. NWS did not implement strong credential management for some OT systems, and II. NWS lacked complete vulnerability scanning coverage for some OT systems.

The Consumer Product Safety Improvement Act of 2008 (CPSIA) requires that the Office of Inspector General of the U.S. Consumer Product Safety Commission annually provide to the appropriate congressional committees the findings, conclusions, and recommendations from our reviews and audits performed under subsection 205(a) of the CPSIA as well actions taken with regard to employee complaints under subsection 205(b). The attached report fulfills these requirements for fiscal year 2024.

The audit objectives were to determine whether program funds were managed in accordance with the ARC and Federal grant requirements.

We rendered a qualified opinion on the EPA's fiscal years 2022 and 2021 Toxic Substances Control Act, or TSCA, Service Fee Fund financial statements, meaning that, except for material errors in expenses and income from other appropriations and earned and unearned revenue, the statements were fairly presented. We noted two material weaknesses: the EPA materially understated TSCA income and expenses from other appropriations, and the EPA materially misstated TSCA

earned and unearned revenue. We noted one significant deficiency: the EPA needs to improve its financial statement preparation process.