Information Technology

skip-to-content
11.08.2023
Audit Initiated of DOT’s Information Security Program and Practices for Fiscal Year 2024
10.30.2023
DOT Needs To Improve Its High-Value Assets Governance Program To Effectively Identify, Prioritize, and Secure Its Most Critical Systems
09.27.2023
Quality Control Review of the Independent Auditor’s Report on the Assessment of DOT’s Information Security Program and Practices
09.11.2023
Quality Control Review on the Independent Auditor’s Report on the Surface Transportation Board’s Information Security Program and Practices
08.30.2023
DOT’s Cloud-Based Systems’ Security Weaknesses Hinder Its Transition to a Zero Trust Architecture
07.24.2023
Audit Initiated of MARAD's USMMA Sexual Assault Prevention and Response Program’s Information Management System
02.28.2023
Audit Initiated of DOT’s Management of Mobile Device Security
01.31.2023
Audit Initiated of Fiscal Year 2023 STB FISMA Review
11.22.2022
Audit Initiated of DOT’s Implementation of Continuous Monitoring Tools For Improving Cybersecurity
11.02.2022
Audit Initiated of DOT’s Information Security Program and Practices for Fiscal Year 2023
09.28.2022
DOT Has Made Progress Meeting the Requirements of the Geospatial Data Act of 2018
09.28.2022
Quality Control Review on the Independent Auditor’s Report on the Assessment of DOT’s Information Security System Program and Practices
09.07.2022
Quality Control Review of an Independent Auditor’s Report on the Surface Transportation Board’s Information Security Program and Practices
02.03.2022
Audit Initiated of Fiscal Year 2022 Review of DOT’s Compliance with Geospatial Data Act of 2018
01.28.2022
Audit Initiated of Fiscal Year 2022 STB FISMA Review
01.27.2022
Audit Initiated of DOT’s Information Security Program and Practices for Fiscal Year 2022
12.02.2021
Strengthening DOT’s Cybersecurity Program To Protect the Nation’s Transportation Infrastructure
11.03.2021
Audit Initiated of FHWA’s Information Technology Infrastructure
11.01.2021
Audit Initiated of DOT Cloud Services
10.25.2021
Quality Control Review of the Independent Auditor’s Report on the Assessment of DOT’s Information Security System Program and Practices
10.25.2021
Audit Initiated of Cybersecurity of DOT’s High Value Assets
10.20.2021
FMCSA’s IT Infrastructure Is at Risk of Compromise
10.20.2021
FTA Does Not Effectively Assess Security Controls or Remediate Cybersecurity Weaknesses To Ensure the Proper Safeguards Are in Place to Protect Its Financial Management Systems
10.04.2021
Quality Control Review of an Independent Auditor’s Report on the Surface Transportation Board’s Information Security Program and Practices
01.26.2021
Audit Initiated of the Surface Transportation Board’s Information Security Program and Practices for Fiscal Year 2021
01.26.2021
Audit Initiated of DOT’s Information Security Program and Practices for Fiscal Year 2021
11.12.2020
Audit Initiated of Security Controls for FTA’s Financial Management Systems That Support CARES Act Funding
10.26.2020
Quality Control Review of the Independent Auditor’s Report on the Assessment of DOT’s Information Security Program and Practices
10.02.2020
DOT Is Making Progress Toward Fulfilling the Requirements of the Geospatial Data Act of 2018
09.28.2020
Quality Control Review of an Independent Auditor’s Report on the Surface Transportation Board’s Information Security Program and Practices
04.20.2020
Memorandum to the Secretary: Supporting DOT’s Efforts To Meet CARES Act Responsibilities
04.16.2020
Revised Announcement—DOT’s Compliance with the Geospatial Data Act of 2018
03.23.2020
Audit Initiated of DOT’s Compliance with the Geospatial Data Act of 2018
03.04.2020
Audit Initiated of FAA’s System Security Re-Categorizations
01.15.2020
Audit Initiated of DOT’s Information Security Program and Practices for Fiscal Year 2020
01.15.2020
Audit Initiated of the Surface Transportation Board’s Information Security Program and Practices for Fiscal Year 2020
10.29.2019
Audit Initiated of the Federal Motor Carrier Safety Administration’s Information Technology Infrastructure
09.25.2019
Quality Control Review of an Independent Auditor’s Report on the Surface Transportation Board’s Information Security Program and Practices
07.24.2019
The Maritime Administration’s Information Technology Infrastructure Is at Risk for Compromise
05.01.2019
Audit Initiated of FAA’s Roles and Responsibilities on the Aviation Cybersecurity Initiative
03.27.2019
Audit Initiated of DOT’s Information Security Program and Practices for Fiscal Year 2019
03.20.2019
FAA Has Made Progress But Additional Actions Remain To Implement Congressionally Mandated Cyber Initiatives
03.20.2019
FISMA 2018: DOT’s Information Security Program and Practices
02.27.2019
Audit Initiated of Security Controls of FAA’s Standard Terminal Automation Replacement System (STARS)
02.06.2019
Audit Initiated of the Surface Transportation Board’s Information Security Program and Practices for Fiscal Year 2019
12.04.2018
DOT Has Not Met Federal Targets for Implementing Components of Its Information Security Continuous Monitoring Program
10.24.2018
Quality Control Review of an Independent Auditor’s Report on the Surface Transportation Board’s Information Security Program and Practices
09.12.2018
Quality Control Review of the Independent Service Auditor’s Report on DOT’s Enterprise Services Center
07.16.2018
Audit Initiated of the Surface Transportation Board’s Information Security Program and Practices for Fiscal Year 2018
03.07.2018
Audit Initiated of the Maritime Administration’s Information Technology Infrastructure
02.14.2018
Audit Initiated of DOT’s Information Security Program and Practices for Fiscal Year 2018
01.24.2018
FISMA 2017: DOT’s Information Security Posture Is Still Not Effective
01.17.2018
Quality Control Review of DOT’s Implementation of Earned Value Management Practices
01.17.2018
Quality Control Review of the Assessment of DOT’s Protection of Privacy Information
12.20.2017
Quality Control Review for DOT’s Implementation of Enterprise Architecture
10.26.2017
The Surface Transportation Board’s Information Security Program Is Not Effective
08.07.2017
Cybersecurity Planning Weaknesses May Hinder the Efficient Use of Future Resources
05.31.2017
FAA’s Security Controls Are Insufficient for Its En Route Automation Modernization Program
04.04.2017
Audit Initiated of FAA's Security Controls of the Data Communications Program
02.08.2017
Audit Initiated of DOT’s Information Security Program and Practices for Fiscal Year 2017
02.01.2017
Audit Initiated of DOT’s Implementation of Earned Value Management System
02.01.2017
Audit Initiated of DOT’s Implementation of Enterprise Architecture
02.01.2017
Audit Initiated of DOT’s Protection of Privacy Information
01.18.2017
Audit Initiated of DOT’s Information Security Continuous Monitoring (ISCM) Program
11.09.2016
DOT Continues to Make Progress, but the Department’s Information Security Posture Is Still Not Effective
11.07.2016
Improvements Increase DOT’s Compliance With the Reducing Over-Classification Act
11.04.2016
DOT’s DATA Act Readiness: The Department Is on Schedule to Meet the May 2017 Reporting Deadline
10.13.2016
DOT Cybersecurity Incident Handling Is Ineffective and Incomplete
08.31.2016
Quality Control Review of Controls over DOT’s Enterprise Services Center
08.11.2016
Report Required by Cybersecurity Act of 2015
04.13.2016
Audit Initiated of FAA's En Route Automation Modernization Program Information Security Controls
03.28.2016
Audit Initiated of DOT’s Compliance with the Cybersecurity Act of 2015
03.22.2016
The Volpe Center’s Information Technology Infrastructure Is at Risk for Compromise
03.03.2016
Multiple DOT Operating Administrations Lack Effective Information System Disaster Recovery Plans and Exercises
03.02.2016
Audit Initiated of DOT’s Information Security Program and Practices for Fiscal Year 2016
02.04.2016
FAA’s Security Controls Are Insufficient for Large Terminal Radar Approach Control Facilities
11.10.2015
Audit Initiated of DOT Cybersecurity Funding
11.05.2015
DOT Had Major Success in PIV Implementation, But Problems Persist In Other Cybersecurity Areas
06.23.2015
Audit Initiated of DOT’s Compliance with the Reducing Over-Classification Act
06.16.2015
DOT Lacks an Effective Process for Its Transition to Cloud Computing
11.05.2014
Quality Control Review of Controls Over DOT's Enterprise Services Center
02.10.2015
Audit Initiated of DOT’s Information Security Program and Practices for Fiscal Year 2015
01.22.2015
Audit Initiated of the Effectiveness of DOT’s Cyber Security Incident Handling and Response
01.15.2015
Audit Initiated of Effectiveness of DOT’s Information Systems’ Disaster Recovery Plans and Exercises
11.14.2014
DOT Has Made Progress but Significant Weaknesses in Its Information Security Remain
08.07.2014
Audit Initiated of the Information Technology Controls over FAA’s Large Terminal Radar Approach Control Facilities
09.30.2014
Audit Termination Notification: Audit of the Federal Aviation Administration’s Security Controls for the Data Communications Program
08.13.2014
Audit Initiated of Volpe Network Security for the Office of the Assistant Secretary for Research and Technology
06.05.2014
Weaknesses Exist in FAA’s Security Controls for the Traffic Flow Management System
07.17.2014
Quality Control Review of the Audit of the Effectiveness of DOT's Earned Value Management Practices
06.05.2014
Quality Control Review of Controls over DOT's Protection of Privacy Information
05.27.2014
Audit Initiated of the Security and Controls over FAA’s Data Communications Program
03.05.2014
Audit Initiated of DOT's Information Security Program and Practices for Fiscal Year 2014
01.29.2014
Audit Initiated of the Efficiency of DOT’s Implementation of Cloud-Computing
01.15.2014
Quality Control Review of Controls Over DOT's Enterprise Services Center
11.22.2013
FISMA: 2013 DOT Has Made Progress, But Its Systems Remain Vulnerable To Significant Security Threats
09.25.2013
Audit Announcement of the Effectiveness of DOT’s Earned Value Management Practices
09.23.2013
DOT Does Not Fully Comply With Requirements of the Reducing Over-Classification Act
09.18.2013
Audit Initiated of DOT's Protection of Privacy Information
09.10.2013
Security Weakness In DOT's Common Operating Environment Expose Its Systems and Data To Compromise
06.27.2013
FAA’s Civil Aviation Registry Lacks Information Needed for Aviation Safety and Security Measures
03.27.2013
Improvements to DOT’s Governance Processes Are Needed To Enhance Oversight of Major IT Investments
03.05.2013
Top Ten OIG Recommendations for the U.S. Department of Transportation
02.13.2013
Audit Initiated of DOT’s Information Security Program and Practices for Fiscal Year 2013
11.14.2012
FISMA 2012: Ongoing Weaknesses Impede DOT’s Progress Toward Effective Information Security
05.30.2012
The U.S. Merchant Marine Academy's Security Controls Were Not Sufficient to Protect Sensitive Data from Unauthorized Access
04.17.2012
DOT Does Not Have An Effective Enterprise Architecture Program For Management Of Information Technology Changes
03.16.2012
Audit Initiated of DOT's Common Operating Environment (COE) Security Controls
03.09.2012
Audit Initiated to Review the Security Controls over FAA's ATCSCC
02.14.2012
Audit Initiated of DOT’s Information Security Program and Practices for Fiscal Year 2012
11.14.2011
FISMA 2011: Persistent Weaknesses in DOT's Controls Challenge the Protection and Security of its Information Systems
02.04.2011
Audit Initiated of the Effectiveness of DOT's Enterprise Architecture Program
02.03.2011
Audit Initiated of the United States Merchant Marine Academy's Technical Security Controls
01.07.2011
Audit Initiated of DOT’s Information Security Program and Practices for Fiscal Year 2011
12.21.2010
Audit Initiated of the Security and Controls over the Civil Aviation Registry Systems - Federal Aviation Administration
11.15.2010
Timely Actions Needed to Improve DOT's Cybersecurity
10.22.2010
ARRA Websites Vulnerable to Hackers and Carry Security Risks
06.18.2010
Information Security and Privacy Controls Over the Airmen Medical Support Systems
03.08.2010
Audit Initiated of DOT's Network Accounts Management
03.04.2010
Audit Initiated of DOT's Information Security Program and Practices for Fiscal Year 2010
12.08.2009
Audit Initiated of DOT Security Controls over the American Recovery and Reinvestment Act Related Websites
11.18.2009
Final Report on the Department of Transportation’s Information Security Program
10.01.2009
Quality Control Review of Controls Over the Enterprise Services Center
07.30.2009
Audit of the Data Integrity of the Commercial Driver's License Information System
05.04.2009
Review of Web Applications Security and Intrusion Detection in Air Traffic Control Systems
04.24.2009
Quality Control Review of the Department's Implementation of Earned Value management and Security Cost Reporting
12.19.2008
Audit Initiated of DOT's Implementation of Personal Identity Verification Cards
10.08.2008
DOT's Information Security Program
09.09.2008
Review of DOT Privacy Policies and Procedures
06.10.2008
Audit Initiated of DOT's Information Security Program and Practices for Fiscal Year 2008
06.02.2008
Audit Initiated of the Web Applications Security in Air Traffic Control Systems
02.28.2008
Audit Initiated of Information Security and Privacy Controls over FAA's Medical Support System
02.19.2008
Audit Initiated of DOT's Implementation of Earned Value Management System and Security Costs Reporting
02.07.2008
Audit Initiated of Intelligent Transportation Systems/Joint Program Office (ITS/JPO)
12.05.2007
Audit Initiated of Data Integrity of the Commercial Drivers License Information Systems (CDLIS)
10.29.2007
Audit of Security and Controls Over the National Driver Register
10.10.2007
Information Security Program at the Department of Transportation
08.28.2007
Analysis of Loss of Control Over Sensitive Personally Identifiable Information and Follow-up Actions to Strengthen its Protection
08.01.2007
Volpe Center's Information Technology Security and Resource Management Activities
03.30.2007
Audit Initiated of DOT's Information Security Program
10.23.2006
DOT's Information Security Program
10.13.2006
Audit of NTSB's Information Security Program
08.04.2006
Letter on OIG review of NTSB's Information Security Program to meet FISMA requirements
07.21.2006
Audit Initiated of DOT's Information Security Program
05.08.2006
Audit Initiated of Volpe Center's Information Technology and Resource Management Activities.
01.09.2006
Report on Audit of Security of the Federal Railroad Computer Systems Network
10.07.2005
DOT’s Information Security Program
10.07.2005
NTSB’s Information Security Program
07.20.2005
Letter to NTSB Chairman Rosenker regarding a forthcoming audit on NTSB's Information Security Program
07.20.2005
Audit announced on DOT’s Information Security Program
04.07.2005
Department of Transportation’s Implementation of the Federal Information Security Management Act
03.22.2005
Audit initiated on Security and Controls Over the National Driver Register, National Highway Traffic Safety Administration
01.25.2005
Audit initiated of Federal Railroad Administration's Network Infrastructure Security
12.21.2004
Follow-up Report on DOT’s Rulemaking Process and Tracking System
11.05.2004
Security and Controls Over Technical Center Computer Systems, FAA
10.01.2004
DOT Information Security Program
09.30.2004
Volpe's Project Management Controls
09.28.2004
NTSB Information Security Program
08.05.2004
FAA's En-Route Center Computer Security and Controls
08.04.2004
Role and Functions of the Volpe National Transportation Systems Center
08.04.2004
Audit of Financial Controls for Cost Accounting and Billing Practices, Volpe National Transportation Systems Center
06.29.2004
Audit of DOT's Information Security Program Initiated
09.30.2003
Computer Security of DOT’s Delphi Financial Management System
09.30.2003
Computer Security of FTA's Grant Management and Payment Systems
09.25.2003
DOT Information Security Program
04.08.2003
Audit Initiated of Computer Security and Controls of FTA's Grant Management and Payment Systems
03.03.2003
Audit Initiated of DOT's Rulemaking Tracking System
02.28.2003
Computer Security and Controls at U.S. Coast Guard Aircraft Repair and Supply Center
02.25.2003
Computer Security and Controls of U.S. Coast Guard’s Aircraft Repair and Supply Center
01.09.2003
Shutdown of TASC’s Transportation Computer Center
11.19.2002
Computer Security Challenges Within the Department of Transportation
11.01.2002
Audit Initiated of Computer Security and Controls for the Delphi Financial Management System
09.30.2002
DOT Web Systems Security
09.27.2002
DOT Information Security Program
05.16.2002
Newly Initiated Audit--Protection of DOT Web Systems
05.08.2002
Newly Initiated Audit--DOT Capital Planning and Investment Control
04.15.2002
Report on DOT's Information Technology Omnibus Procurement Program (ITOP)
11.05.2001
FAA En-route Center Computer Security and Controls
09.07.2001
DOT Information Security Program
09.07.2001
Coast Guard Operations Systems Center - Computer Security and Controls
09.06.2001
Coast Guard Finance Center - Computer Security and Controls
08.28.2001
Information Technology Omnibus Procurement (ITOP)
08.21.2001
Replacement of FAA Telecommunications Systems
05.23.2001
DOT Web Site Vulnerability
05.03.2001
Report on FRA E-Mail System Replacement Contracts
02.26.2001
Report on Web Privacy
01.25.2001
Follow Up on Privacy Concerns for Web Visitors
11.03.2000
Privacy Concerns for Web Visitors
09.27.2000
Computer Security Within the U.S. Department of Transportation
09.25.2000
Headquarters Computer Network Security
07.13.2000
Interim Report on Computer Security
05.23.2000
Computer Security Controls of Financial Management System
04.11.2000
Use of Funds for the Year 2000 Computer Program
11.04.1999
Readiness for the Year 2000
09.30.1999
Readiness for the Year 2000 Transportation Sector - Domestic and International
09.09.1999
Readiness for the Year 2000 Aviation Industry - Domestic and Foreign and the Federal Aviation Administration
04.05.1999
The Year 2000 Technology Challenge
03.15.1999
The Year-2000 Technology Challenge at the Department of Transportation
08.25.1998
The Year-2000 Computer Problem and Computer Security Challenges
08.06.1998
DOT/FAA Year-2000 Computer Issues
02.23.1998
The Year 2000 Computer Challenges
02.04.1998
Year-2000 challenges to the air traffic control system
12.18.1997
Assessing the Year-2000 Computer Problem
12.16.1997
Management Advisory on Selected Chief Information Officer Functions
11.26.1997
Management Advisory on the Year-2000 Computer Problem
-A A +A