Search

-A A +A
skip-to-content
DOT Has Not Met Federal Targets for Implementing Components of Its Information Security Continuous Monitoring Program
What We Looked At
Library Item
Date: 12.04.2018
PDF icon DOT Information Security Continuous Monitoring Program Final Report^12-4-18.pdf
Improvements Increase DOT’s Compliance With the Reducing Over-Classification Act
Information security is a top priority for the Department of Transportation (DOT) and other Federal agencies and requires accurate and accountable application of classification standards.
Library Item
Date: 11.07.2016
PDF icon ROCA Final Report.pdf
Quality Control Review of Controls Over the Enterprise Services Center
On October 1, 2009, we issued our final report on the general, application, and operational controls over the DOT Enterprise Services Center. OIG hired a CPA firm to perform this review in accordance with the Statement of Auditing Standard No.
Library Item
Date: 10.01.2009
PDF icon FY2009_SAS_70final_10-01-2009l_(5).pdf
DOT Lacks an Effective Process for Its Transition to Cloud Computing
DOT has taken steps to transition to cloud computing, such as establishing a multi-modal Cloud Working Group, but it has not taken other actions needed to ensure an effective transition.
Library Item
Date: 06.16.2015
PDF icon DOT Cloud Computing Final Report - 6-16-15.pdf
DOT Does Not Fully Comply With Requirements of the Reducing Over-Classification Act
On September 19, 2013, we issued our report entitled DOT Not Fully Complying with Requirements of the Reducing Over-Classification Act.  Our objectives were to (1) determine whet
Library Item
Date: 09.23.2013
PDF icon Reducing Overclassification Act compliance report.pdf
The Volpe Center’s Information Technology Infrastructure Is at Risk for Compromise
This report presents the results of our audit of the security controls for the John A. Volpe Center’s (Volpe) information technology infrastructure.
Library Item
Date: 03.22.2016
PDF icon Volpe Center IT Security Controls_Final Report^3-22-16.pdf
Quality Control Review on the Independent Auditor’s Report on the Assessment of DOT’s Information Security System Program and Practices
What We Looked At
Library Item
Date: 09.28.2022
PDF icon QCR of FY22 DOT FISMA_9.28.22.pdf
Multiple DOT Operating Administrations Lack Effective Information System Disaster Recovery Plans and Exercises
The Department of Transportation (DOT) relies on more than 450 information systems, many of which provide fundamental capabilities for keeping the Nation’s transportation system safe and operational.
Library Item
Date: 03.03.2016
PDF icon DOT Disaster Recovery Plans and Exercises Final Report^3-3-16.pdf
DOT Does Not Have An Effective Enterprise Architecture Program For Management Of Information Technology Changes
On April 17, 2012, we issued a report on the results of our audit of DOT’s enterprise architecture (EA) program.
Library Item
Date: 04.17.2012
PDF icon DOT Enterprise Architecture.pdf

Pages