The U.S. Government Accountability Office (GAO) issued a report this past week identifying nine new deficiencies in the Bureau of Fiscal Service's information systems.
These deficiencies primarily pertain to security management, access controls, and configuration management, but the GAO does not consider them “individually or collectively to be material weaknesses or significant deficiencies,” the agency wrote on its website.
However, it did note that the issues “warrant the attention and action of management.”
The report also states that without a “well-designed security management program, security controls may be inadequate; responsibilities may be unclear, misunderstood or improperly implemented; and controls may be inconsistently applied.”
The new report includes updates on the status of previously detailed deficiencies. One of three prior deficiencies has been remediated, the report states, along with three of the nine new ones.