The DOJ OIG conducted an audit of the Civil Rights Division's security controls and the CRT-Justice Consolidated Office Network system as required by FISMA FY2025. The audit assessed the design and operating effectiveness of security controls protecting DOJ information systems. Report Number 26-045 documents the OIG's findings regarding control deficiencies and makes recommendations for improvement.

Federal agencies, particularly those within DOJ, should review the OIG's findings to identify potential similar weaknesses in their own security control implementations. While the audit report itself is non-binding, agencies are expected to develop corrective action plans addressing identified deficiencies. Compliance teams should coordinate with IT security staff to evaluate whether current control frameworks align with FISMA requirements and OIG expectations.