Federal Crop Insurance Corporation/Risk Management Agency's Financial Statements for Fiscal Year 2024
Report Information
Recommendations
We recommend that management:
• Implement audit logging monitoring controls to reduce the risk that inappropriate and/or unusual activity that may compromise the integrity and availability of systems and data goes undetected and resolved.
• Design, document, and implement preventive controls to remove system application access within an acceptable timeframe following a user’s separation date.
• Enforce existing policies to ensure that all users are included within quarterly user access reviews.