EAC OIG, through the independent public accounting firm CliftonLarsonAllen LLP, audited the EAC's implementation of privacy and data protection policies and its compliance with Section 522 of the Transportation, Treasury, Independent Agencies, and General Government Appropriations Act, 2005.
Audit of U.S. Election Assistance Commission's Compliance with Section 522 of the Consolidated Appropriations Act 2005
Report Information
Status of Recommendations
EAC management should develop and implement a plan to implement encryption to all data stored on agency laptops and workstations.
EAC management should perform a review for unprotected PII stored on the network share drives to ensure files are adequately protected.
EAC management should implement a validation process to ensure encryption of all backup tapes being transported off-site for storage.
We recommend EAC management: 1) perform an inventory of EAC's PII data and how it is used within the agency; 2) document and implement a process for the Privacy Officer to periodically report to the Office of Inspector General on the Agency's…
We recommend EAC finalize and implement the Records Management Processes and Procedures Standard Operating Procedure.