OIG-16-A-10, Status of Recommendations: Audit of NRCs Personal Identity Verification Card Access System, Dated February 1, 2018
| ML18032A399 | |
| Person / Time | |
|---|---|
| Issue date: | 02/01/2018 |
| From: | Baker B NRC/OIG/AIGA |
| To: | Mccree V NRC/EDO |
| References | |
| OIG-16-A-10 | |
| Download: ML18032A399 (2) | |
Text
UNITED STATES NUCLEAR REGULATORY COMMISSION WASHINGTON, D.C. 20555-0001 OFFICE OF THE INSPECTOR GENERAL February 1, 2018 MEMORANDUM TO:
Victor M. McCree Executive Director for Operations FROM:
Dr. Brett M. Baker /RA/
Assistant Inspector General for Audits
SUBJECT:
STATUS OF RECOMMENDATIONS: AUDIT OF NRCS PERSONAL IDENTITY VERIFICATION CARD ACCESS SYSTEM (OIG-16-A-10)
REFERENCE:
DIRECTOR, OFFICE OF ADMINISTRATION MEMORANDUM DATED DECEMBER 28, 2017 Attached is the Office of the Inspector Generals (OIG) analysis and status of recommendations as discussed in the agencys response dated December 28, 2017.
Based on this response, recommendation 1 is closed. Recommendations 2, 3, 4, 5, 6, and 7 were previously closed. All recommendations related to this report are now closed.
If you have questions or concerns, please call me at (301) 415-5915, or Beth Serepca, Team Leader at (301) 415-5911.
Attachment:
As stated cc:
H. Rasouli, OEDO R. Lewis, OEDO J. Jolicoeur, OEDO J. Bowen, OEDO EDO_ACS_Distribution
Audit Report AUDIT OF NRCS PERSONAL IDENTITY VERIFICATION CARD ACCESS SYSTEM OIG-16-A-10 Status of Recommendations Recommendation 1:
Require return of contractor PIV cards as part of the contract deliverables.
Agency Response Dated December 28, 2017:
On December 11-12, 2017, the staff posted on the internally available NRC Enterprise Acquisition Toolset Web page the revised statement of work templates for staff to use in the development of new contracts.
Additionally, all the contract security clauses were reviewed and have been updated to require the return of the PIV cards to the Contracting Officer Representative (COR) or within 3 days of the individual no longer requiring access. The COR is required to provide the badge to the Security Management and Operations Branch within the Office of Administration. The updated contract clauses will be used for all future contracts. This closes the staffs action on this recommendation.
OIG Analysis:
OIG reviewed the Web page and spoke with the point of contact to ensure that the security clauses were updated as needed to close the recommendation. OIG determined that NRC included language in the Statement of Work template requiring contractors who are issued NRC PIV cards to return the card as soon as the contractor is no longer on a contract or no longer needs physical or logical access as part of the contract deliverables. This recommendation is therefore considered closed.
Status:
Closed.