U.S. flag

An official website of the United States government Here’s how you know

The .gov means it’s official.

Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you're on a federal government site.

The site is secure.

The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Hotline

Report Fraud, Waste and Abuse
2021-OE-0001-18
Status
Closed
Date Issued
February 15, 2022
Closed Date
September 20, 2022
OIG Component Office
Evaluation
The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
Program Office
Chief Information Officer
Questioned Costs
$0.00
Better Funds Use
$0.00
Publication Report Number
2021-OE-0001
Publication Report
Fiscal Year 2021 Federal Information Security Modernization Act (FISMA) Evaluation Report

Related Recommendations

Recomendation Status Date Issued Summary
2021-OE-0001-01 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-02 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-03 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-04 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-05 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-06 Open February 15, 2022 Define and communicate an organization-wide SCRM strategy to address risk appetite and tolerance, outline controls, evaluate and monitor supply chain risk, define roles and responsibilities, and discuss approaches to implement the strategy (derived from OIG FISMA metric 12).
2021-OE-0001-07 Open February 15, 2022 Define and communicate SCRM policies, procedures, and processes, ensuring that roles and responsibilities, management commitment, and coordination among organizational entities, and procedures to implement the policies and supply chain and supply chain-related controls are addressed (derived from OIG FISMA metric 13).
2021-OE-0001-08 Open February 15, 2022 Define and communicate policies and procedures to ensure that its products, system components, systems, and services comply with its cybersecurity and SCRM requirements. This recommendation includes a. identification and prioritization of externally provided systems (new and legacy), components, and services; b. how HUD maintains awareness of its upstream suppliers; c. the integration of acquisition processes, tools, and techniques to use the acquisition process to protect the supply chain; and d. contract tools or procurement methods to confirm that contractors are meeting their obligations (derived from OIG FISMA metric 14).
2021-OE-0001-09 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-10 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-11 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-12 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-13 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-14 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-15 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-16 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-17 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-19 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-20 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-21 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-22 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.
2021-OE-0001-23 Open February 15, 2022 The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.