IG Deems DHS Intel System Management 'Effective'
But Concerns Raised About Coast Guard Support System
In an unclassified summary of the audit made public Tuesday, the IG said the overall IT security procedures have been documented and adequate security controls have been implemented. Nonetheless, the IG said "issues remain" regarding the effectiveness of management oversight and operational issues.
"We have concerns with the documentation for the Coast Guard Intelligence Support System certification and accreditation package and the information system security training and awareness program for intelligence personnel," the summary said. "Also, we identified security issues with the classified local area network and Coast Guard Intelligence Support System. We recommended that the undersecretary for intelligence and analysis address the open recommendations identified during our review. The department concurred with all four recommendations."
The Federal Information Security Management Act required the IG to review the department's security management, implementation, and evaluation of its intelligence activities, including its policies, procedures and system security controls for enterprise-wide intelligence systems. The IG assessed the department's plan of action and milestones, certification and accreditation and incident reporting processes, as well as its security training and awareness program.
