U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Mainframe Platform Configuration Compliance Controls Need Improvement

Report Information

Date Issued
Report Number
2022-20-050
Report Type
Audit
Joint Report
No
Agency Wide
Yes (agency-wide)
Questioned Costs
$0
Funds for Better Use
$0
View Report

Recommendations

Ensure that the checklist adjudication process for the **2** logical partitions is formalized to align with the current process for Tier II devices.

Ensure that agency procedures are updated to include checklist adjudication requirements for the mainframe platforms.

The Chief Information Officer should prioritize adding the date first seen and date remediated data elements capability to the mainframe vulnerability reporting tool.

The Chief Information Officer should consider phasing out the use of the unsupported and outdated **2**** platform.
rejected recommendation

The Chief Information Officer should ensure that emergency change requests are approved and documented based on agency-defined policies and procedures.