Board Report: 2018-IT-B-015R September 26, 2018
The Board Division of Research and Statistics analyzes economic and financial data underpinning monetary policy and other decisions. We evaluated information security controls for the division's general support system, which supports these research computing activities.
The Board has taken steps to implement information security controls for the general support system in accordance with applicable federal and agency requirements, including the Federal Information Security Modernization Act of 2014. Still, the Board can make improvements to ensure that controls are effectively implemented, assessed, authorized, and monitored.
Our report contains recommendations focusing on controls and risk management activities related to access control, configuration management, and audit and accountability.
Given the sensitivity of our review, this report is restricted.