MCC Implemented a Managed and Measurable Information Security Program for Fiscal Year 2022 in Support of FISMA

We contracted with the independent certified public accounting firm RMA Associates LLC to conduct an audit of the Millennium Challenge Corporation’s (MCC’s) information security program for fiscal year 2022 in support of the Federal Information Security Modernization Act of 2014 (FISMA).  The audit firm concluded that MCC implemented a managed and measurable information security program based on the maturity level MCC achieved for each of its core FISMA reporting metrics. We did not make recommendations in this report.