Evaluation of DHS' Compliance with Federal Information Security Modernization Act Requirements for Intelligence Systems for Fiscal Year 2019   [open pdf - 182KB]

From the Unclassified Summary: "We evaluated the Department of Homeland Security's (DHS) enterprise-wide security program for Top Secret/Sensitive Compartmented Information intelligence systems. Pursuant to the Federal Information Security Modernization Act of 2014, we reviewed the Department's security program, and system security controls for the enterprise-wide intelligence system. Since our FY 2018 evaluation, the Office of Intelligence and Analysis has continued to provide effective oversight of the department-wide intelligence system and has implemented programs to monitor ongoing security practices. We determined that DHS' information security program for Top Secret/Sensitive Compartmented Information intelligence systems is effective this year as the Department achieved 'Level 4 - Managed and Measurable' in three of five cybersecurity functions, based on current reporting instructions for intelligence systems."