Board Report: 2022-IT-B-008R June 15, 2022
This report provides additional details on our testing of the Board's software and license asset management processes, which we performed as part of our 2021 audit of the Board's information security program.
We found that the Division of Research and Statistics has not established a software and license inventory and associated review procedures in accordance with agency policy. Doing so will help reduce risks associated with introducing and using software and associated licenses within this division's environment, as well as enhance enterprisewide visibility into the software in use across the Board. As such, we are making a recommendation to strengthen processes in this area.
Given the sensitivity of our review, the full report is restricted.
