Summary

We publicly released our audit report on computer security and controls at the U.S. Coast Guard’s Aircraft Repair and Supply Center in Elizabeth City, NC. We found the center needs to: (1) establish a disaster-recovery and business-continuity plan; (2) strengthen security governing access to its computer systems and the physical complex; (3) strengthen its process for controlling changes to production systems; and (4) enhance security administration, including background checks on key personnel. We identified five priority actions the Coast Guard should take. We asked the Coast Guard to provide their action plan and estimated dates for resolving the action items to the Department of Homeland Security OIG. The audit was conducted for us by PricewaterhouseCoopers LLP.