2013 Audit of the Board's Information Security Program

November 14, 2013

Memorandum

The Office of Inspector General is pleased to present its report on the 2013 audit of the information security program of the Board of Governors of the Federal Reserve System (Board). We performed this audit pursuant to requirements in the Federal Information Security Management Act of 2002 (FISMA), title III, Public Law 107-347 (December 17, 2002), which requires each agency Inspector General to conduct an annual independent evaluation of the agency's information security program and practices.

We provided a draft of our report to the Director of the Division of Information Technology, in her capacity as Chief Information Officer, for review and comment. Her response is included as appendix B. In her response, the Director agreed with the two recommendations and stated that she intends to take immediate action to address each recommendation. We will utilize the results of our review of the Board's information security program and practices to respond to specific questions in the Department of Homeland Security's FY 2013 Inspector General Federal Information Security Management Act Reporting Metrics.

We appreciate the cooperation we received from Board personnel during our review. Please contact me if you would like to discuss this report or any related issues.

Attachment