As required by the Federal Information Security Modernization Act of 2014 (FISMA), the USAID Office of Inspector General is initiating an evaluation of the Millennium Challenge Corporation’s (MCC) information security program for fiscal year 2026. Implementing an effective information security program is crucial for protecting the confidentiality, integrity, and availability of the Agency’s systems and the information they contain.
The evaluation objective is to determine whether MCC implemented an effective information security program. For this evaluation, an effective information security program is defined as having an overall mature program based on the fiscal year 2026 Inspector General FISMA reporting metrics.