The NARA Office of Inspector General engaged, CliftonLarsonAllen LLP, to conduct an audit in support of the FISMA requirement for an annual evaluation of NARA’s information security program. The objective of this performance audit was to determine whether NARA implemented selected security and privacy controls for selected information systems in support of FISMA and related information security policies, procedures, standards and guidelines.