Recommendation Contents
OIG recommends that Department management, through the Management Control Steering Committee, direct the Office of the Chief Information Officer to employ the services of the National Security Agency to conduct independent penetration testing to further evaluate the Information System Security Program and outline a range of technical and procedural countermeasures to reduce risks.
