[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-587202-105":59,"doc-detail-587202-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","federal-information-security-modernization-act-of-2014-audit-of-the-us-department-of-educations-information-security-program-and-practices-final-audit-report-2025","Federal Information Security Modernization Act of 2014 Audit of the U.S. Department of Education’s Information Security Program and Practices - Final Audit Report - 2025","","Final Audit Report covering the Federal Information Security Modernization Act of 2014 for the U.S. Department of Education’s information security program and practices for Fiscal Year 2025. The Office of Inspector General contracted with the independent certified public accounting firm Williams, Adley & Company – DC, LLC to assess security controls in the period July 1, 2024 through June 30, 2025. The audit was performed under generally accepted government auditing standards, with OIG oversight through plan review, monitoring, status meetings, and draft/final report reviews, and includes responsibility for corrective action planning and tracking through department systems.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":40,"@type":76,"position":81},"https://docshare.wps.com/document/research-report/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/federal-information-security-modernization-act-of-2014-audit-of-the-us-department-of-educations-information-security-program-and-practices-final-audit-report-2025/587202/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/federal-information-security-modernization-act-of-2014-audit-of-the-us-department-of-educations-information-security-program-and-practices-final-audit-report-2025/587202.png","ImageObject",300,407,{"name":92,"@type":93},"วิน","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-29","2026-10-15",true,{"@type":102,"interactionType":103,"userInteractionCount":44},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"What is the purpose of this final audit report?","Question",{"text":112,"@type":113},"It determines whether the U.S. Department of Education’s overall IT security programs and practices are effective as they relate to federal information security requirements.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"Who conducted the audit and how was it overseen?",{"text":117,"@type":113},"Williams, Adley & Company – DC, LLC conducted the audit, while the Office of Inspector General reviewed, provided feedback, approved the audit plan, monitored performance, and reviewed draft and final report work.",{"name":119,"@type":110,"acceptedAnswer":120},"What period did the audit cover for Fiscal Year 2025?",{"text":121,"@type":113},"The audit assessed information and information system security controls in place from July 1, 2024 to June 30, 2025.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},587202,1792068780,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":39,"category_name":40,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":44,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":139,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":144,"read_time":145,"preview_page_count":4},2336475104736,"https://ap-avatar.wpscdn.com/avatar/22000c4c5e0e5b17e70?x-image-process=image/resize,m_fixed,w_180,h_180&k=1786591360781797222","U.S. Department of Education Office of Inspector General  \nThe U.S. Department of Education’s Federal Information Security Modernization Act of 2014 Report  \nFor Fiscal Year 2025  \nJuly 31, 2025  \nED-OIG/A25IT0212  \nJuly 31, 2025  \nTO: Thomas N. Flagg  \nChief Information Officer  \nOffice of the Chief Information Officer  \nFROM: Keith Cummins /s/  \nActing Deputy Assistant Inspector General  \nAudit Services  \nOffice of Inspector General  \nSUBJECT: Final Audit Report  \nFederal Information Security Modernization Act of 2014 Audit of the U.S. Department of Education’s Information Security Program and Practices for Fiscal Year 2025  \nControl Number ED-OIG/A25IT0212  \nAttached is the final audit report that determined whether the U.S. Department of Education’s (Department) overall information technology security programs and practices are effective as they relate to Federal information security requirements. We contracted with the independent certified public accounting firm of Williams, Adley & Company – DC, LLC (Williams Adley) to conduct this audit. The audit assessed the information and information system security controls in place during the period of July 1, 2024, to June 30, 2025.  \nThe contract required that the audit be performed in accordance with generally accepted government auditing standards (GAGAS) . In connection with the contract, the Office of Inspector General (OIG) reviewed, provided feedback, and ultimately approved the audit plan. In addition, OIG monitored the performance of the audit, reviewed contractor audit documentation, attended critical meetings with the Department officials and reviewed the contractor’s audit controls. As part of the oversight and monitoring, the OIG:  \n• ensured the audit complied with GAGAS and other OIG policies and procedures;  \n• ensured contract requirements regarding objectives, scope, and methodology were being met;  \n• held bi-weekly status meetings to discuss whether milestones were being met; and  \n• performed draft and final report reviews, conducted within the Information Technology Oversight Team, to provide assurance that the contractor’s work can be relied upon.  \nAn electronic copy has been provided to your Audit Liaison Officer. Williams Adley received and  \nevaluated the Office of the Chief Information Officer (OCIO) management comments in response to the  \nfindings and recommendations in the report. OCIO agreed to provide corrective action plans for all recommendations by September 30, 2025.  \nCorrective actions proposed (resolution phase) and implemented (closure phase) by your office will be monitored and tracked through the Department’s Audit Accountability and Resolution Tracking System. The corrective action plan should set forth the specific action items and targeted completion dates necessary to implement final corrective actions on the findings and recommendations contained in this final report.  \nIn accordance with the Inspector General Act of 1978, as restated (5 U.S.C. §§ 401–424), the Office of Inspector General is required to report to Congress twice a year on recommendations that have not been completed after 6 months from the date of issuance.  \nIn accordance with the Freedom of Information Act (5 U.S.C. § 552), reports issued by the Office of Inspector General are available to members of the press and general public to the extent information contained therein is not subject to exemptions in the Act.  \nWilliams Adley is responsible for the enclosed auditor’s report and the conclusions expressed therein. The OIG’s review disclosed no instances where Williams Adley did not comply, in all material aspects, with GAGAS.  \nWe appreciate the cooperation shown to Williams Adley and the OIG during this audit. If you have any questions, please contact Joseph Maranto, Director, Information Technology Oversight Team at 202- [245-7044 or](245-7044 or joseph.maranto@ed.gov)[ ](245-7044 or joseph.maranto@ed.gov)[joseph.maranto@ed.gov](245-7044 or joseph.maranto@ed.go","cbCaiv5x4h8xRqFE","https://ap.wps.com/l/cbCaiv5x4h8xRqFE","pdf",1510885,68,"English","# Final Audit Report\n## Purpose, scope, and audit standards\n## OIG oversight and contractor responsibilities\n## Findings, corrective actions, and reporting requirements\n## Distribution and related administrative notes","[{\"question\":\"What is the purpose of this final audit report?\",\"answer\":\"It determines whether the U.S. Department of Education’s overall IT security programs and practices are effective as they relate to federal information security requirements.\"},{\"question\":\"Who conducted the audit and how was it overseen?\",\"answer\":\"Williams, Adley \\u0026 Company – DC, LLC conducted the audit, while the Office of Inspector General reviewed, provided feedback, approved the audit plan, monitored performance, and reviewed draft and final report work.\"},{\"question\":\"What period did the audit cover for Fiscal Year 2025?\",\"answer\":\"The audit assessed information and information system security controls in place from July 1, 2024 to June 30, 2025.\"}]","Federal Information Security Modernization Act of 2014 Audit of the U.S. Department of Education’s Information Security Program and Practices - Final Audit Report - 2025 | PDF",1792061022,171]