The objective of the evaluation was to assess the compliance of the Commission’s information security policies, procedures and standards and guidelines with the Federal Information Security Modernization Act (FISMA).
Open Recommendations
Recommendation Number | Significant Recommendation | Recommended Questioned Costs | Recommended Funds for Better Use | Additional Details | |
---|---|---|---|---|---|
01 | No | $0 | $0 | CIO-2022-01 | |
The Commission IT staff evaluate the Supply Chain policy against the requirements of NIST 800-53 Rev. 5 to ensure compliance for each of the individual controls. | |||||
04 | No | $0 | $0 | CIO-2022-04 | |
Ensure that a BIA is prepared, completed and approved. After the initial BIA is put in place, it should be updated whenever significant updates to the GSS are implemented. |