An official website of the United States government
Here's how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Brought to you by the Council of the Inspectors General on Integrity and Efficiency
Federal Reports
Report Date
Agency Reviewed / Investigated
Report Title
Type
Location
Department of Education
The U.S. Department of Education’s Federal Information Security Modernization Act of 2014
Our objective was to determine whether the U.S. Department of Education’s (Department) overall information technology (IT) security programs and practices were effective as they relate to Federal information security requirements.The Department made several improvements in implementing its cybersecurity posture. In FY21 the Department improved in three functional areas and three metric areas from Level 2 Defined to Level 3 Consistently Implemented.However, its overall IT security programs and practices were not effective in all the five security functions. We had findings in four of the nine metric domains, which included findings with the same or similar conditions identified in prior reports, as well as open findings from previous years where the corrective action plan was not completed.Although the Department made considerable progress in strengthening its information security programs, we found areas needing improvement in all nine metric domains.
This report was submitted to the Comptroller General in accordance with Section 5 of the Government Accountability Office Act of 2008. The report summarizes the activities of the Office of Inspector General (OIG) for the six-month reporting period ending September 30, 2021. During the reporting period, the OIG issued one audit report and continued two performance audits. In addition, the OIG closed 15 investigations and two self-initiated inquiries, and opened 10 new investigations. The OIG processed 59 hotline complaints, many of which were referred to other OIGs for action because the matters involved were within their jurisdictions. The OIG remained active in the GAO and OIG communities by briefing new GAO employees on its audit and investigative missions, and participating in committees and working groups of the Council of Inspectors General on Integrity and Efficiency, including those related to the Pandemic Response Accountability Committee. Details of these activities and other accomplishments are provided in the report.
