Recommendation Contents
OIG recommends that the Chief Information Officer, in coordination with the Information Security Steering Committee, implement a risk management framework strategy for the Department that is consistent with Federal Information Security Management Act requirements, Office of Management and Budget policy, and applicable National Institute of Standards and Technology guidelines.
