Skip to Navigation
Skip to Main content
OIG Home
OIG Home


Skip SHARE THIS PAGE section Skip STAY CONNECTED section

Board Report: 2020-IT-B-020 November 2, 2020

2020 Audit of the Board’s Information Security Program

available formats

The Federal Information Security Modernization Act of 2014 requires us to perform an annual, independent evaluation of the Board's information security program. We evaluated the program's maturity level (from a possible low of 1 to a possible high of 5) across several areas.

Overall, the Board's information security program continues to operate effectively at level 4 (managed and measurable). Nonetheless, the Board has opportunities to mature its information security program. Similar to our previous FISMA audits, a consistent theme we noted is that the decentralization of information technology services results in an incomplete view of the risks affecting the Board's security posture.

We are making recommendations to strengthen the Board's information security program in several areas.