Audit of the African Development Fund’s Fiscal Year 2014 Compliance With the Federal Information Security Management Act of 2002

Recommendations

Recommendation
1

The Chief Information Officer place a protective
cover over the emergency power switch to prevent someone from accidentally cutting off the power to the data center.

Questioned Cost
0
Close Date
Recommendation
2

The Chief Information Officer implement a process to document approvals to changes in the general support system by requiring signatures from the change control board members, in accordance with National Institute of Standards and Technology Special Publication 800-53, Revision 3, and for audit verification purposes.

Questioned Cost
0
Close Date
Recommendation
3

The Chief Information Officer update the foundation's continuity of operations plan to reflect its May 2014 Security Categorization of USADF Information Types and Information Systems.

Questioned Cost
0
Close Date
Recommendation
4

The Chief Information Officer update the foundation's information technology security implementation plan to reflect its May 2014
Security Categorization of USADF Information Types and Information Systems.

Questioned Cost
0
Close Date