Review of ARC's cybersecurity and information security program
Open Recommendations
| Recommendation Number | Significant Recommendation | Recommended Questioned Costs | Recommended Funds for Better Use | Additional Details | |
|---|---|---|---|---|---|
| 26-17-01 | No | $0 | $0 | ||
| The Commission conduct an information security risk assessment and develop and implement comprehensive written policies and procedures for all areas of the information security program. | |||||
| 26-17-02 | No | $0 | $0 | ||
| The Commission develop and implement a quality review system to review and revise information security policies and procedures on an annual basis, in accordance with previously established Commission standards. | |||||