Improvements Are Needed to Ensure That New Information Systems Deploy With Compliant Audit Trails and That Identified Deficiencies Are Timely Corrected

The Chief Technology Officer should ensure that the Cybersecurity Security Risk Management office, which conducts annual testing of security controls, ensures that testers are instructed to appropriately test audit trail controls and report the identified audit trail deficiencies.