FY 2015 Federal Information Security Management Act (FISMA) Submission to the Office of Management and Budget (OMB) (LTR 2016-4/ FA-15-108-4), issued November 13, 2015
We contracted with CliftonLarsonAllen LLP, an independent public accounting firm, to perform an evaluation and review of PBGC’s information and technology (IT) security required by the Federal Information Security Management Act (FISMA). PBGC has made progress in addressing conditions reported in previous years. Please see OIG’s Report on Internal Controls Related to the Pension Benefit Guaranty Corporation's Fiscal Year 2015 and 2014 Financial Statements Audit (link to report). The internal control report specifically addresses PBGC’s progress in mitigating IT control weaknesses identified in: (1) PBGC’s entity-wide security program and (2) access controls and configuration management.