Home > Top Management Challenges > Fundamental Deficiencies in OS' Cybersecurity Incident Response Program Increase the Risk of Cyberattacks
Fundamental Deficiencies in OS' Cybersecurity Incident Response Program Increase the Risk of Cyberattacks
| Date Issued | March 22, 2023 |
|---|---|
| Report Number | OIG-23-017-I |
| Report Type | Audits / Evaluations |
| Description |
Our evaluation found that the Office of the Secretary’s (OS’) Security Operations Center had not properly configured its security tools to detect our simulated attacks and struggled to effectively respond to the incident. We also found that OS’ Office of the Chief Information Officer did not manage its incident detection and response program in accordance with federal requirements. |
| View Report | OIG-23-017-I_Final_Report.pdf |
| View Abstract | OIG-23-017-I_Abstract_SECURED.pdf |
| View Announcement | Evaluation-of-the-Departments-Cyber-Incident-Detection-and-Response.pdf |
