All Reports

This narrative and the responses submitted to the Office of Management and Budget (OMB) through the CyberScope portal provide our independent assessment of the quality of NARA’s information security practices.

NARA OIG performed this audit to determine if NARA has developed a comprehensive information system inventory to track and monitor all information systems operated ormaintained throughout the agency. We also evaluated NARA’s information systems to determine if they were adequately classified and categorized.

NARA OIG audited the NARA's compliance with Circular A-123, FMFIA, and internal guidance related to internal controls. We also evaluated the system of internal controls for NARA program offices, the accuracy of NARA’s Fiscal Year (FY) 2015 FMFIA Assurance Statement, and supporting individual office assurance statements.

Cotton & Company LLP independent report on the NARA's enterprise-wide risk assessment of internal controls and the risks to NARA’s mission, operations, and procedures.

The objective of this audit was to determine NARA's compliance with improper payment requirements based on Office of Management and Budget Memorandum 15-02 and OMB Circular A-136.

The audit assessed the effectiveness and adequacy of management controls in place for refiles of IRS records at six FRCs: Atlanta, Dayton, Kansas City, Kingsridge, Lee’s Summit, and Lenexa.

The objective of this audit was to review the preparation and planning for the transfer of the Obama Administration’s records.

The objective of this audit was to evaluate the security of NARA’s publicly-accessible websites. We also evaluated NARA’s progress toward implementing Hypertext Transfer Protocol Secure on all of its websites as required by Office of Management and Budget Memorandum M-15-13, and verified NARA conducted a review of security assessments associated with its cloud web hosting initiative.