# SBA - 22-19 - 4
> **Closed** recommendation · 2022-09-27
**Report:** COVID-19 and Disaster Assistance Information Systems Security Controls ([detail](https://api.ai-analytics.org/ig-report/33372))
**OIG report number:** 22-19
**Recommendation number:** 4
## Text
Enforce the requirement to establish and implement internal controls to ensure appropriate program officials perform and document contract reviews to ensure that information security is appropriately addressed in the contracting language, as required by OMB Circular A-130 and SBA SOP 90 47 6.
---
*Source: oversight.gov · AI Analytics · CC0 1.0*