Federal Reports

This is our final report on OIG's audit of NOAA's IT systems in response to a significant cyber attack that took place in September 2014. We conducted this audit to (1) determine the significant factors that contributed to the successful cyber attack on NOAA information systems and (2) evaluate NOAA’s handling of the detection, analysis, eradication, and reporting of the attack, as well as recovery from it.

we reported that the North Carolina Department of Public Instruction improved its oversight of LEA single audit resolution during the period covered by our review and noted that several aspects of its oversight were effective. However, we also identified specific aspects of the North Carolina Department of Public Instruction’s oversight that could be improved to correct control weaknesses and ensure compliance with regulatory requirements. We found that the North Carolina Department of Public Instruction did not have adequate written policies and procedures that described all aspects of its oversight of the LEA audit resolution process, an adequate system for tracking LEA findings acrossaudit periods or across the State, or a quality assurance process for its oversight of LEA audit resolution. Finally, we noted that management decisions for LEA audit findings did not meet all Federal content requirements.