Data Encryption Controls Over Personally Identifiable Information on USDA Information Technology Systems
The Department of Agriculture (USDA) is responsible for adhering to privacy laws and regulations pertaining to the storage and use of personally identifiable information (PII) of its customers and employees. The Office of Inspector General performed this audit of agency systems to provide an overall assessment of the encryption controls in place. We assessed seven USDA agencies’ encryption security posture to determine if they protected and encrypted PII data appropriately.