Report #15-P-0290, September 21, 2015
What We Found
By not having a complete inventory of contractor systems, and by not assessing the operating effectiveness of contractor control environments in which systems are placed, the EPA risks being unable to protect its resources and data from undue harm.