FISMA: MCC Implemented an Effective Information Security Program for FY 2025 Despite Some Concerns

Recommendation
1

MCC's Chief Information Officer develop a schedule for completing the overdue security assessment of the internal system and conduct the assessment accordingly.

Questioned Cost
0
Funds for Better Use
0
Recommendation
2

MCC's Chief Information Officer develop and implement procedures requiring contracts for external systems to include assessments of security controls at a frequency MCC defines

Questioned Cost
0
Funds for Better Use
0