Examination of the U.S. Department of Education’s Incident Response Coordination Efforts

The objective of our inspection was to determine if the Department established and implemented controls throughout all phases of its incident response lifecycle to ensure compliance with Federal guidance and regulations.

Although the Department established policies, procedures, and guidance governing its incident response program, we noted areas where it can improve its current process. 

We made 12 recommendations to improve the Department’s incident response program.

Information Technology Security