The DOJ OIG conducted an audit of the FBI's security controls for two major IT systems: the Bureau Investigative Document Management and Analysis System and the Global Mission Analytics Cloud System. The audit evaluated compliance with the Federal Information Security Modernization Act of 2014 requirements. Report Number 26-040 documents findings regarding the design and operating effectiveness of security controls.

The FBI should review the audit findings and develop corrective action plans to address identified security control deficiencies. While Inspector General audit reports are non-binding, agencies typically respond with remediation steps. This audit applies to FBI operations and provides a framework for federal agencies undergoing similar FISMA assessments.