Opportunities Exist to Improve the Operational Efficiency and Effectiveness of the Board's Information Security Life Cycle

Table of Contents

• Report Contributors and Abbreviations
• Summary of Recommendations
• Memorandum
• Introduction
• Finding 1: Elements of the Board’s Information Security Life Cycle Were Missing for Some Systems
• Finding 2: BISP Policies and Procedures Are Not Consistently Updated
• Appendix A: Scope and Methodology
• Appendix B: Federal Guidance Applicable to the Security Life Cycle Issued Since 2010
• Appendix C: Management’s Response