U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

U.S. Department of Agriculture, Office of the Chief Information Officer, Fiscal Year 2019 Federal Information Security Modernization Act

Report Information

Date Issued
Report Number:
50503-0002-12USDA
Report Type
Audit
Description
As required by FISMA, OIG reviewed USDA’s ongoing efforts to improve its information technology security program and practices during fiscal year 2019.
Joint Report
Yes
Participating OIG
Department of Agriculture OIG
Agency Wide
Yes (agency-wide)
Questioned Costs
$0
Funds for Better Use
$0
View report on Oversight.gov

Recommendations

To help ensure that contractors gain tax-exempt status and prevent inappropriate reimbursement of taxes, we recommend that the Department of State Office of Procurement Executive; USAID Office of Acquisition and Assistance; the Commander USACE; and the Commander CJTSCC: Issue guidance and training to contracting officers on how to properly identify taxes in contracts and invoices.

Perform a complete review to identify the full population and last review date of all IT policies and procedures maintained by the Department. For each policy/procedure that does not have evidence of review within the time frame prescribed by DR 0100-001, perform a review, and make appropriate revisions before obtaining the appropriate approver’s signature and timestamp. Revised policies/procedures should be disseminated to employees as required by NIST SP 800-53 Revision 4.

Enforce USDA’s non-mission software policy and remove the unauthorized software from USDA systems.