Federal Reports

The OIG employs modern technologies and tools to ensure good financial management of 
American taxpayers' investment in the OIG. I have tasked my staff to develop a structured process 
to identify and perform our high-risk evaluation work. In order to do so, I have also implemented 
an Effectiveness and Efficiency Review Initiative within OIG. This initiative allows senior OIG 
staff to collaborate on enhancing our efforts to identify the highest mission-related risk areas, and 
ultimately conduct targeted evaluations of such areas. This initiative is manned by senior OIG 
staffers who work together to identify better high-risk areas associated with the Agency’s mission-
critical programs and conduct targeted reviews to address risk areas and identify effective and 
efficient solutions. Applying this new concept within the OIG while merging technologies and 
other innovative approaches and ideas to our work has aided in improved performance regarding 
the OIG’s core mission of providing independent, objective, standards-based oversight, and 
enforcement to protect EEOC programs and the people they serve from fraud, waste, and abuse. 
Furthermore, the OIG staff has fully returned to the office as required by President Donald Trump’s 
Executive Order. Our employees have effectively transitioned to in-office posture and continue to 
maintain high individual and team productivity. I would like to personally thank the OIG's 
dedicated team of talented professionals who have demonstrated resilience and flexibility during 
this time of transition. 
Finally, I would like to congratulate former Commissioner Andrea R. Lucas for being named by 
President Trump to serve as the Agency’s Acting Chair. We look forward to working with Acting 
Chair Lucas and her staff in helping to make the EEOC a model workplace. We would also like to 
thank the EEOC senior leadership for their ongoing cooperation, and Congress for its continuing 
support of the OIG’s mission.

This report summarizes the results of our fiscal year 2024 Federal Information Security Modernization Act (FISMA) evaluation and assessment of the U.S. Small Business Administration’s (SBA) information security program. Our objectives were to determine whether SBA complied with FISMA and assessed the maturity of controls used to address risks in each of the nine security domains.

We found SBA generally responded to previously identified vulnerabilities and made progress in one of the nine domains, in the area of security training. The agency met the baseline in the area of incident response but fell below the baseline for an effective security program in several areas. We rated SBA’s overall information security program as “not effective.”

This fiscal year there are seven new recommendations for improvement. There are 11 open recommendations from 3 prior evaluations. Repeat recommendations from prior years were not included in this report because they have not yet been implemented. The agency successfully closed four recommendations from fiscal year 2023. SBA managers agreed with six recommendations and partially agreed with one. Their corrective actions resolved all the recommendations.

The audit objectives were to determine whether program funds were managed in accordance with the ARC and Federal grant requirements.

In March 2021, the Postal Service released a 10-year strategic plan to address continuing annual financial losses, unmet service performance goals, and diminishing market relevancy as consumer behaviors have changed. On September 30, 2024, the Postal Service released Delivering for America (DFA) 2.0: Fulfilling the Promise, to revisit and re-examine the factors contributing to the development of the plan and detail the evolution of its strategies, focusing on service excellence and financial stability.

This six-month update, in particular, highlights the successes and challenges the Postal Service experienced with a key strategy of the DFA, which is to fully optimize its surface and air transportation network.