An official website of the United States government
Here's how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Brought to you by the Council of the Inspectors General on Integrity and Efficiency
The Board of Governors provides the Postal Service with strategic direction, similar to a corporate board of directors. As of October 2016, only one of the nine governor positions was filled. In December 2016, there will be no remaining governors, unless more are confirmed. This unprecedented situation could have broad ramifications for the Postal Service.
Our FY 2016 FISMA review concluded that the Department’s and FSA’s overall information security programs were generally not effective. We found that although the Department and FSA made some progress in strengthening their information security since FY 2015, weaknesses remained, leaving their systems vulnerable to security threats. The report included 11 findings, 5 of which were repeat findings.
FY 2016 Independent Evaluation of the National Credit Union Administration's Compliance with the Federal Information Security Modernization Act of 2014
The National Credit Union Administration Office of Inspector General engaged CliftonLarsonAllen LLP (CLA) to independently evaluate NCUA’s information systems and information security program and controls for compliance with the Federal Information Security Modernization Act of 2014 (FISMA 2014). This transmits the results of CLA's FY 2016 evaluation of NCUA’s information security and privacy management programs.
We contracted with CliftonLarsonAllen LLP, an independent public accounting firm, to perform an evaluation of PBGC’s information security program as required by the Federal Information Security Modernization Act (FISMA). In Fiscal Year 2016, PBGC made progress improving its information security program by publishing its Information Security Risk Management Framework Process and requiring the use of PIV for authentication; however, improvements are still needed. More specifically, PBGC needed to permanently fill its risk executive position and ensure current NIST controls are fully and consistently implemented including controls over access control. The Corporation also needed to fully implement its information system continuous monitoring program. The OIG’s Report on Internal Controls Related to the Pension Benefit Guaranty Corporation’s Fiscal Year 2016 and 2015 Financial Statements Audit (AUD 2017-3/FA-16-110-2) presents additional details on the Corporation’s progress in mitigating IT control weaknesses identified in: (1) PBGC’s entity-wide security program and (2) access controls and configuration management.
