Recommendations for the Report Titled U.S. Department of the Interior’s Continuous Diagnostics and Mitigation Program Not Yet Capable of Providing Complete Information for Enterprise Risk Determinations (Report No. ISD-IN-MOA-0004-2014-I)

We reviewed Recommendations 1, 2, 5, and 6 from our 2016 report titled U.S. Department of the Interior’s Continuous Diagnostics and Mitigation Program Not Yet Capable of Providing Complete Information for Enterprise Risk Determinations to verify whether the OCIO implemented them.We consider Recommendations 1, 2, 5, and 6 resolved and implemented.