Independent Audit on the Effectiveness of EXIM’s Information Security - Fiscal Year 2022
Report Information
Recommendations
Update and implement the Enterprise Risk Management program, including applicable policies and procedures, to align with the new requirements outlined in the NIST SP 800-53, Rev. 5, Security and Privacy Controls for Information Systems and Organizations…
Implement and test controls within the newly implemented GRC system.
Recommendation redacted per exemptions (b)(4) and (b)(7)(E) of the Freedom of Information Act.
Recommendation redacted per exemptions (b)(4) and (b)(7)(E) of the Freedom of Information Act.
Recommendation redacted per exemptions (b)(4) and (b)(7)(E) of the Freedom of Information Act.
Recommendation redacted per exemptions (b)(4) and (b)(7)(E) of the Freedom of Information Act.
Recommendation redacted per exemptions (b)(4) and (b)(7)(E) of the Freedom of Information Act.