Text of Recommendation | We recommend NRC management implement a revised ITI Core Services 90-day account disablement script to ensure all non-privileged and privileged Active Directory accounts are captured and disabled in accordance with NRC policies.
After notification of the audit finding, NRC management implemented a revised ITI Core Services 90-day account disablement script. The effectiveness of the revised script will be assessed during the next audit period. |
---|---|
Recommendation Number | 2 |
Recommendation Status | Open |
Significant Recommendation | Yes |
Submitting OIG | |
---|---|
Report Title | Audit of the U.S. Nuclear Regulatory Commission’s (NRC) Implementation of the Federal Information Security Modernization Act of 2014 for Fiscal Year 2023 |
Report Submitting OIG-Specific Report Number | OIG-23-A-10 |
Report Date Issued | Tuesday, October 3, 2023 |
Report Agency Reviewed / Investigated | |
Report Questioned Costs | $0 |
Report Funds for Better Use | $0 |