A recent inspector general report found that while the U.S. Consumer Product Safety Commission had made progress in implementing requirements under the 2014 Federal Information Security Modernization Act, a lack of dedicated resources within the commission still remain.

“We attributed many of the issues that we identified to the CPSC’s decision to not dedicate the resources necessary to support the implementation of planned activities,” the IG report said. “The information technology challenges currently facing the CPSC are particularly relevant as the agency continues to deal with the implementation of the Consumer Product Safety Improvement Act, specifically with the CPSIA’s impacts on the agency’s IT operations.”

Among the 13 identified issues were a lack of identified contingency plans in the event of a network disruption, lack of enforcement of personal identity verification, inadequately managed privileged user accounts, a lack of strategy for identity access management and implementation of the Department of Homeland Security’s CDM program, and poorly defined training requirements.

Of the 13 issues, the IG report cited insufficient resources as a direct cause for five and noted that increased resource investment would be needed to resolve one more. Two of the causes were redacted.

The report offered a total of 46 solutions to the 13 identified problems.

Agency management concurred with all of the report’s findings and offered solutions to resolve the identified problems.

About Jessie Bur

Jessie Bur covers federal IT and management.

Share:
In Other News
Load More