The Health Resources and Services Administration Should Improve Preventive and Detective Controls To More Effectively Mitigate the Risk of Compromise

Submitting OIG:

Date Issued:

Wednesday, February 22, 2023

Agency Reviewed / Investigated:

Submitting OIG-Specific Report Number:

A-18-20-08200

Component, if applicable:

Health Resources and Services Administration

Location(s):

Moldova

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

View Document:

Attachment	Size
182008200.pdf	908.07 KB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation
23-A-18-043.01	Open	No
We recommend that the Health Resources and Services Administration remediate the nine security control findings we identified.
23-A-18-043.02	Open	No
We recommend that the Health Resources and Services Administration update security configurations to align with the most current NIST SP 800-53 security controls.
23-A-18-043.03	Open	No
We recommend that the Health Resources and Services Administration implement policies and procedures to periodically identify and assess whether security controls are in place and operating effectively in accordance with the most current NIST SP 800-53 and remediate weak controls timely.

Recommendation Number

Recommendation Status

Significant Recommendation

Additional Details

23-A-18-043.01

Open

23-A-18-043.02

Open

23-A-18-043.03

Open