Review of DHS’ Information Security Program for Intelligence Systems for Fiscal Year 2016

We evaluated the Department of Homeland Security (DHS) enterprise-wide security program for Top Secret/Sensitive Compartmented Information intelligence systems. We assessed DHS programs for continuous monitoring management, configuration management, identity and access management, incident response and reporting, risk management, security training, plans of actions and milestones, remote access management, contingency planning, and contractor systems. This report will be issued to the Office of the Inspector General of the Intelligence Community, in accordance with reporting instructions dated May 10, 2016.