Reports - Audit

OIG performed agreed-upon procedures for assessing information reported by USDA’s National Finance Center.

ERS’ Data Product Review Council (DRPC) reviews are designed to evaluate ERS data products’ adherence to six Office of Management and Budget quality standards and attributes; however, ERS has not performed a DPRC review since July 2019.

As required by FISMA, OIG reviewed USDA’s ongoing efforts to improve its information technology security program and practices during FY 2022.

We evaluated USDA’s coordination of, and performance measures for, the beginning farmers and ranchers programs and followed up on recommendations made in our prior audit report.

This report presents the results of the Statement on Standards for Attestation Engagements No. 21 examination for the United States Department of Agriculture’s (USDA) Financial Management Services (FMS) description of its financial systems used to process user entities financial transactions throughout the period October 1, 2021, to June 30, 2022.

This report presents the results of the System and Organization Controls 1 Type 2 examination conducted in accordance with Statement on Standards for Attestation Engagements No. 21 for the United States Department of Agriculture’s (USDA) National Finance Center (NFC) description of its payroll and personnel systems used to process user entities payroll and human resource transactions throughout the period October 1, 2021, to June 30, 2022.

This report presents the results of the System and Organization Controls 1 Type 2 examination conducted in accordance with Statement on Standards for Attestation Engagements No. 21 for the United States Department of Agriculture (USDA) Office of the Chief Information Officer (OCIO) description of its data center hosting and security systems used to process user entities’ transactions throughout the period October 1, 2021, to June 30, 2022.

We reviewed the process FAS used to award $300 million in ATP funding during FY 2019.

The Office of Inspector General (OIG) evaluated and tested USDA’s virtualization platforms for compliance with controls found in National Institute of Standards and Technology (NIST) and industry best practices to determine the status of USDA’s overall management and security of IT resources.