Information Security: Weaknesses in USAID's Management of Travel System Account Closures Highlight Concerns About Protecting Travelers and Sensitive Information

Date Issued

Tuesday, May 13, 2025

Submitting OIG

U.S. Agency for International Development OIG

Agencies Reviewed/Investigated

U.S. Agency for International Development

Report Number

A-000-25-002-M

Report Type

Inspection / Evaluation

Location

United States

Number of Recommendations

Questioned Costs

Funds for Better Use

Report updated under NDAA 5274

Open Recommendations

This report has 4 open recommendations.

Recommendation Number	Significant Recommendation	Recommended Questioned Costs	Recommended Funds for Better Use
1	No	$0	$0
We recommend that USAID's Chief of Travel and Transportation review the list of 33 separated users whose accounts in the End-to-End Travel system that have no record of being disabled and, if they are not needed, disable them.
2	No	$0	$0
We recommend that USAID's Chief of Travel and Transportation determine the activities of 11 separated users who logged into the End-to-End Travel system after their termination dates and take appropriate action.
3	No	$0	$0
We recommend that USAID's Chief of Travel and Transportation designate an Information System Security Officer to perform security functions for the End-to-End Travel system in accordance with USAID policy.
4	No	$0	$0
We recommend that USAID's Chief of Travel and Transportation revise the system security plan to require account managers for the End-to-End Travel system to be notified about personnel separations in a timely manner and receive sufficient time to disable system access within 24 hours, rather than 3 days, of a user's separation.