Reports
Search reports, investigative results, and agency plansShowing 21 - 30 of 31 results
Small Business Administration OIG
COVID-19 and Disaster Assistance Information Systems Security Controls
This report presents the results of our audit to determine whether the U.S. Small Business Administration (SBA) maintained effective management control activities and monitoring of the design and implementation of third-party operated SBA systems. SBA needed information technology systems from third-party service providers that could improve the system efficiency and productivity to process high transaction volumes, transmit data between other information systems, and safeguard the integrity and confidentiality of the personally identifiable information processed by the programs. We found the...
Small Business Administration OIG
COVID-19 Economic Injury Disaster Loan Applications Submitted from Foreign IP Addresses
We evaluated the U.S. Small Business Administration’s (SBA) controls to flag or prevent potentially fraudulent Coronavirus Disease 2019 (COVID-19) Economic Injury Disaster Loan (EIDL) applications submitted from foreign Internet Protocol (IP) addresses. Although the agency implemented several layers of controls to prevent or reduce fraud from foreign countries, individuals at foreign IP addresses were able to access the COVID-19 EIDL application system. SBA received millions of attempts to submit COVID-19 EIDL applications from foreign IP addresses and stopped most of them; however, the agency...
Amtrak (National Railroad Passenger Corporation) OIG
Governance: Observations on Amtrak’s Use of CARES Act Funds
The objective for this management advisory report was to monitor and assess how the company is using CARES Act funds and the controls it has in place to accurately account for and report on them. The company experienced a sharp drop in ridership and passenger revenues in March 2020 as a result of the coronavirus pandemic. The company’s response included aggressive cost-cutting actions such as cancelling some of its train service and reducing management pay and retirement benefits. Despite these actions, the company projected that revenues would still not cover its reduced costs and requested...