Report #14-P-0142, March 21, 2014
What We Found
The EPA places its information systems and data at risk due to an organizational structure that has not specified required duties and responsibilities to ensure personnel are trained on key information security roles.