← oversight.gov

SBA - 22-19 - 1

Open · 2022-09-27

From report

Report
COVID-19 and Disaster Assistance Information Systems Security Controls
OIG report number
22-19
Recommendation number
1

Recommendation text

Ensure the existing SBA System Development Methodology is updated to include supply chain risk-management practices as required by OMB Circular A-130 and high-value asset system designation guidance. Also, ensure high-value asset system risks are incorporated into the enterprise risk management framework, as recommended by OMB M-19-03 and SBA SOP 90 47 6.