FBI Information Security Management Program Audit

The DOJ Office of the Inspector General conducted an audit of the FBI's information security management program pursuant to FISMA FY 2025, assessing the Bureau's implementation of information security controls and compliance with federal cybersecurity requirements. The audit resulted in 12 recommendations addressing identified weaknesses in the FBI's security posture.

This audit report is directed at the FBI as an internal executive branch review. Federal agencies and contractors supporting government systems may wish to review the findings to benchmark their own FISMA compliance programs against identified gaps. No immediate action deadlines or penalties are associated with this report for external parties.