CINXE.COM

<!DOCTYPE html> <html lang="en" dir="ltr"> <head> <meta charset="utf-8" /> <meta name="Generator" content="Drupal 10 (https://www.drupal.org)" /> <meta name="MobileOptimized" content="width" /> <meta name="HandheldFriendly" content="true" /> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /> <meta http-equiv="x-ua-compatible" content="ie=edge" /> <link rel="icon" href="/sites/default/files/favicon.ico" type="image/vnd.microsoft.icon" /> <title>Open Recommendations | EEOC Office of Inspector General</title> <link rel="stylesheet" media="all" href="/sites/default/files/css/css_0lHDakdq4YlFZ7X02W0LJ4Az0K9ZIzUnNtVZRvnI7fc.css?delta=0&language=en&theme=barrio_oig&include=eJxtjVEKAjEMBS9Ut0daEnyWQtosSbT09qKCFvUn8GZgwmRWdddaMquGh9GR-AOLKJOcPKbUXlZTe4cdVLBCI8Ggmd6t_SXzRXvQgGvDP2ntl369XgprbRvgx_Tk0wMtMznSrWJ4ft6t6fkquAM_hVx5" /> <link rel="stylesheet" media="all" href="https://use.fontawesome.com/releases/v5.12.0/css/all.css" /> <link rel="stylesheet" media="all" href="/sites/default/files/css/css_437PdNTStuJIBdt3X1YXuojEayc-QJ4BDbXAbMdRYgI.css?delta=2&language=en&theme=barrio_oig&include=eJxtjVEKAjEMBS9Ut0daEnyWQtosSbT09qKCFvUn8GZgwmRWdddaMquGh9GR-AOLKJOcPKbUXlZTe4cdVLBCI8Ggmd6t_SXzRXvQgGvDP2ntl369XgprbRvgx_Tk0wMtMznSrWJ4ft6t6fkquAM_hVx5" /> <link rel="stylesheet" media="all" href="//fonts.googleapis.com/css2?family=Raleway:wght@400;600;700&display=swap" /> <link rel="stylesheet" media="all" href="/sites/default/files/css/css_EsAT2yuWUNHv7kdrJy5EbS4nJthCZkU3ebvXrgc4CEM.css?delta=4&language=en&theme=barrio_oig&include=eJxtjVEKAjEMBS9Ut0daEnyWQtosSbT09qKCFvUn8GZgwmRWdddaMquGh9GR-AOLKJOcPKbUXlZTe4cdVLBCI8Ggmd6t_SXzRXvQgGvDP2ntl369XgprbRvgx_Tk0wMtMznSrWJ4ft6t6fkquAM_hVx5" /> <link rel="stylesheet" media="all" href="//use.fontawesome.com/releases/v5.13.0/css/all.css" /> <link rel="stylesheet" media="all" href="/sites/default/files/css/css_fytV6H3zHaR0MngvGcmcu4ufuzYr45ANFhZKPNh89dM.css?delta=6&language=en&theme=barrio_oig&include=eJxtjVEKAjEMBS9Ut0daEnyWQtosSbT09qKCFvUn8GZgwmRWdddaMquGh9GR-AOLKJOcPKbUXlZTe4cdVLBCI8Ggmd6t_SXzRXvQgGvDP2ntl369XgprbRvgx_Tk0wMtMznSrWJ4ft6t6fkquAM_hVx5" /> <link rel="stylesheet" media="print" href="/sites/default/files/css/css_slElz1yVQ-nY8zMqDmNDKFZWaHbUYcKQs5YbO5QhrTc.css?delta=7&language=en&theme=barrio_oig&include=eJxtjVEKAjEMBS9Ut0daEnyWQtosSbT09qKCFvUn8GZgwmRWdddaMquGh9GR-AOLKJOcPKbUXlZTe4cdVLBCI8Ggmd6t_SXzRXvQgGvDP2ntl369XgprbRvgx_Tk0wMtMznSrWJ4ft6t6fkquAM_hVx5" /> </head> <body class="layout-no-sidebars page-view-content path-reports">  <script async src="https://www.googletagmanager.com/gtag/js?id=G-2XFDTH6PS4"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-2XFDTH6PS4'); </script>  <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-KCKFFG5F');</script>  <a href="#main-content" class="visually-hidden focusable skip-link"> Skip to main content </a>    <div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas>     <div id="page-wrapper"> <div id="page"> <header id="header" class="header" role="banner" aria-label="Site header"> <nav class="navbar fixed-top navbar-expand-xl" id="navbar-main"> <div class="container"> <div class="mobile-only navbar-toggler "> <nav id="block-navbar-brand-mobile" class="navbar-brand"> <a href="/" title="Home" rel="home" class="navbar-brand"> <img src="/sites/default/files/logo_full.png" alt="Home" class="img-fluid d-inline-block align-top"> </a> </nav> <button class="vert-center navbar-toggler navbar-toggler-right collapsed" type="button" data-bs-toggle="collapse" data-bs-target="#CollapsingNavbar" aria-controls="CollapsingNavbar" aria-expanded="false" aria-label="Toggle navigation"><span class="navbar-toggler-icon"></span></button> <nav class="vert-center block block-menu navigation menu--moan-fraud " role="navigation" aria-labelledby="block-mainfraud-menu" id="block-mainfraud-mobile" > <h2 class="sr-only" id="block-mainfraud-menu">Main-Fraud</h2> <ul block="block-mainfraud" class="clearfix nav"> <li aria-label="Search" class="nav-item"> <a href="" class="nav-link"><i class="fas fa-search" aria-hidden="true"></i></a> </li> <li class="nav-item"> <a href="/report-fraud-waste-and-abuse" class="nav-link" data-drupal-link-system-path="node/190">Report Fraud, Waste, & Abuse</a> </li> </ul> </div> <div class="collapse navbar-collapse" id="CollapsingNavbar">         <nav id="block-navbar-brand" class="navbar-brand"> <a href="/" title="Home" rel="home" class="navbar-brand"> <img src="/sites/default/files/logo_full.png" alt="Home" class="img-fluid d-inline-block align-top" /> </a> </nav>      <nav role="navigation" aria-labelledby="block-barrio-oig-main-menu-menu" id="block-barrio-oig-main-menu" class="block block-menu navigation menu--main"> <h2 class="sr-only" id="block-barrio-oig-main-menu-menu">Main navigation</h2>     <ul class="clearfix nav navbar-nav"> <li class="nav-item"> <a href="/paginas-en-espanol" class="nav-link nav-link--paginas-en-espanol" data-drupal-link-system-path="node/526">Español</a> </li> <li class="nav-item"> <a href="/" class="nav-link nav-link--" data-drupal-link-system-path="<front>">Home</a> </li> <li class="nav-item"> <a href="/about-us" class="nav-link nav-link--about-us" data-drupal-link-system-path="node/125">About Us</a> </li> <li class="nav-item"> <a href="/newsstand" class="nav-link nav-link--newsstand" data-drupal-link-system-path="newsstand">NewsStand</a> </li> <li class="nav-item menu-item--expanded dropdown"> <a href="/reports" class="nav-link dropdown-toggle nav-link--reports" data-bs-toggle="dropdown" aria-expanded="false" aria-haspopup="true" data-drupal-link-system-path="node/246">Reports</a> <ul class="dropdown-menu"> <li class="dropdown-item"> <a href="/reports/recommendations" class="nav-link--reports-recommendations is-active" data-drupal-link-system-path="reports/recommendations" aria-current="page">Open Recommendations</a> </li> <li class="dropdown-item"> <a href="/reports/audit-evaluation-reports" class="nav-link--reports-audit-evaluation-reports" data-drupal-link-system-path="reports/audit-evaluation-reports">Audit/Evaluations</a> </li> <li class="dropdown-item"> <a href="/reports/semi-annual" class="nav-link--reports-semi-annual" data-drupal-link-system-path="reports/semi-annual">Semi-Annual Reports</a> </li> </ul> </li> <li class="nav-item"> <a href="/faqs" class="nav-link nav-link--faqs" data-drupal-link-system-path="faqs">FAQ</a> </li> <li class="nav-item"> <a href="/whistleblower-resources" class="nav-link nav-link--whistleblower-resources" data-drupal-link-system-path="node/528">Whistleblower Resources</a> </li> </ul>  </nav>      <nav role="navigation" aria-labelledby="block-mainfraud-menu" id="block-mainfraud" class="block block-menu navigation menu--moan-fraud"> <h2 class="sr-only" id="block-mainfraud-menu">Main-Fraud</h2>     <ul id="block-mainfraud" class="clearfix nav"> <li aria-label="Search" class="nav-item"> <a href="" class="nav-link"><i class="far fa-search" aria-hidden="true"></i></a> </li> <li class="nav-item"> <a href="/report-fraud-waste-and-abuse" class="nav-link" data-drupal-link-system-path="node/531">Report Fraud, Waste, & Abuse</a> </li> </ul>  </nav>      <nav role="navigation" aria-labelledby="block-maintopright-menu" id="block-maintopright" class="block block-menu navigation menu--top-right"> <h2 class="sr-only" id="block-maintopright-menu">Main - Top Right</h2>     <ul id="block-maintopright" class="clearfix nav"> <li class="nav-item"> <a href="/espa%C3%B1ol" class="nav-link" data-drupal-link-system-path="español">Español</a> </li> <li class="nav-item"> <a href="/browsers" class="nav-link" data-drupal-link-system-path="node/260">Site Compatibility</a> </li> </ul>  </nav>   <div class="form-inline navbar-form float-right">     <section class="row col region region-header-form">     <div class="search-block-form block block-search block-search-form-block" data-drupal-selector="search-block-form" id="block-searchform" role="search"> <div class="content container-inline"> <div class="content container-inline">     <form action="/search/node" method="get" id="search-block-form" accept-charset="UTF-8" class="search-form search-block-form form-row">    <fieldset class="js-form-item js-form-type-search form-type-search js-form-item-keys form-item-keys form-no-label form-group col-auto">    <label for="edit-keys" class="sr-only">Search</label>      <input title="Enter the terms you wish to search for." data-drupal-selector="edit-keys" type="search" id="edit-keys" name="keys" value="" size="15" maxlength="128" class="form-search form-control" />  </fieldset>     <div data-drupal-selector="edit-actions" class="form-actions js-form-wrapper form-group col-auto" id="edit-actions">     <button data-drupal-selector="edit-submit" type="submit" id="edit-submit" value="Search" class="button js-form-submit form-submit btn btn-primary">Search</button>  </div>  </form>  </div> </div> </div>  </section>  </div> </div> </div> </nav> </header> <div class="highlighted"> <aside class="container section clearfix" role="complementary">         <div data-drupal-messages-fallback class="hidden"></div>   </aside> </div> <div id="main-wrapper" class="layout-main-wrapper clearfix"> <div id="main" class="container container-inner"> <div class="inner-page-top">         <div id="block-barrio-oig-page-title" class="block block-core block-page-title-block"> <div class="content">    <h1 class="title">Open Recommendations</h1>  </div> </div>   </div> <div class="row row-offcanvas row-offcanvas-left clearfix"> <main class="main-content col" id="content" role="main"> <section class="section"> <a id="main-content" tabindex="-1"></a> <div class="top-bar">         <div id="block-barrio-oig-eeoc-system-main" class="block block-system block-system-main-block"> <div class="content">    <div class="views-element-container col-auto">    <div class="view view-content view-id-content view-display-id-page_1 js-view-dom-id-241ff8e123f1321a4fd5a28abf692469eb2ecd81b25cec2fd26eccb62e9a9e57"> <div class="view-filters">    <form class="views-exposed-form" data-drupal-selector="views-exposed-form-content-page-1" action="/reports/recommendations" method="get" id="views-exposed-form-content-page-1" accept-charset="UTF-8">    <div class="form-row">    <fieldset class="js-form-item js-form-type-select form-type-select js-form-item-field-organization-target-id form-item-field-organization-target-id form-group col-auto">    <label for="edit-field-organization-target-id">Organization</label>     <select data-drupal-selector="edit-field-organization-target-id" id="edit-field-organization-target-id" name="field_organization_target_id" class="form-select"><option value="All" selected="selected">- Any -</option><option value="11">Executive Secretariat</option><option value="12">Office of Communications and Legislative Affairs</option><option value="13">Office of Enterprise Data and Analytics</option><option value="14">Office of Equal Opportunity</option><option value="15">Office of Federal Operations</option><option value="16">Office of Field Programs</option><option value="17">Office of General Counsel</option><option value="18">Office of Information Technology</option><option value="19">Office of Inspector General</option><option value="20">Office of Legal Counsel</option><option value="21">Office of the Chair & Commissioners</option><option value="22">Office of the Chief Financial Officer</option><option value="23">Office of the Chief Human Capital Officer</option></select>  </fieldset>     <fieldset class="js-form-item js-form-type-textfield form-type-textfield js-form-item-field-fiscal-year-value form-item-field-fiscal-year-value form-group col-auto">    <label for="edit-field-fiscal-year-value">Fiscal Year</label>      <input data-drupal-selector="edit-field-fiscal-year-value" type="text" id="edit-field-fiscal-year-value" name="field_fiscal_year_value" value="" size="30" maxlength="128" class="form-text form-control" />  </fieldset>     <fieldset class="js-form-item js-form-type-textfield form-type-textfield js-form-item-body-value form-item-body-value form-group col-auto">    <label for="edit-body-value">Search</label>      <input data-drupal-selector="edit-body-value" type="text" id="edit-body-value" name="body_value" value="" size="30" maxlength="128" class="form-text form-control" />  </fieldset>     <fieldset class="js-form-item js-form-type-select form-type-select js-form-item-field-report-type-target-id form-item-field-report-type-target-id form-group col-auto">    <label for="edit-field-report-type-target-id">Report Type</label>     <select data-drupal-selector="edit-field-report-type-target-id" id="edit-field-report-type-target-id" name="field_report_type_target_id" class="form-select"><option value="All" selected="selected">- Any -</option><option value="25">AEP</option><option value="26">AOIG</option><option value="27">EOIG</option><option value="28">FIN</option><option value="32">IOIG</option><option value="33">IOIG</option><option value="30">LIT</option><option value="31">OE</option><option value="29">SPOIG</option></select>  </fieldset>     <div data-drupal-selector="edit-actions" class="form-actions js-form-wrapper form-group col-auto" id="edit-actions">     <button data-drupal-selector="edit-submit-content" type="submit" id="edit-submit-content" value="Apply" class="button js-form-submit form-submit btn btn-primary">Apply</button>  </div>  </div>  </form>  </div> <div class="attachment attachment-before">    <div class="views-element-container col-auto">    <div class="view view-content view-id-content view-display-id-attachment_1 js-view-dom-id-bb182042a6ccee4f8b1d0f410b639ec2643052eef6e6005853c74c1c25068a2d"> <div class="view-content row">    <div class="totals-item-list"> <ul class="totals-list"> <li>    <div class="views-field views-field-field-associated-report"><div class="field-content">    <div class="totals-title">Number of Reports:</div><div class="totals-value"> 13</div>  </div></div><div class="views-field views-field-nid"><span class="field-content">    <div class="totals-title">Number of Recommendations:</div><div class="totals-value"> 28</div>  </span></div><div class="views-field views-field-field-cost"><div class="field-content">    <div class="totals-title">Potential Cost Saving:</div><div class="totals-value"> $0</div>  </div></div>  </li> </ul> </div>  </div> </div>  </div>  </div> <div class="view-header"> <p><a href="/reports/recommendations/recommendations.csv"><img src="/sites/default/files/csv-icon.png"> Download CSV file</a></p> </div> <div class="view-content row">    <div class="recommendation-item-list"> <h3>    FY 2021 Annual Report on the U.S. Equal Employment Opportunity Commission’s Compliance with the Payment Integrity Information Act of 2019  </h3> <ul class="recommendation-item"> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/665" hreflang="en">FY 2021 Annual Report on the U.S. Equal Employment Opportunity Commission's Compliance with the Payment Integrity Information Act of 2019</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>Report the OIG's finding of non-compliance with the FY 2021 PIIA requirements, as outlined in OMB Memorandum M-21-19, Section VI.D, "Agency Responsibility When a Program is Non-Compliant."</p>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/663" hreflang="en">FY 2021 Annual Report on the U.S. Equal Employment Opportunity Commission's Compliance with the Payment Integrity Information Act of 2019</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>Annually conduct an improper payment review in accordance with PIIA and follow the guidance outlined in OMB Circular A-136, section II.4.5 [Payment Integrity Information Act].</p>  </div></div>  </li> </ul> </div>     <div class="recommendation-item-list"> <h3>    U.S. EQUAL EMPLOYMENT OPPORTUNITY COMMISSION FEDERAL INFORMATION SECURITY MODERNIZATION ACT OF 2014 (FISMA)  </h3> <ul class="recommendation-item"> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/709" hreflang="en">FY 2022 Federal Information Security Modernization Act Independent Evaluation</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>We recommend that EEOC defines, communicates, and implements an organization-<br>wide SCRM strategy to guide supply chain analyses, provide communication channels<br>with internal/external partners and stakeholders, and assist in building consensus<br>regarding the appropriate resources for SCRM.</p>  </div></div>  </li> </ul> </div>     <div class="recommendation-item-list"> <h3>    FY 2022 FEDERAL INFORMATION SECURITY MODERNIZATION ACT INDEPENDENT EVALUATION  </h3> <ul class="recommendation-item"> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/667" hreflang="en">PERFORMANCE AUDIT REPORT U.S. EQUAL EMPLOYMENT OPPORTUNITY COMMISSION FEDERAL INFORMATION SECURITY MODERNIZATION ACT OF 2014 (FISMA) FOR THE FISCAL YEAR ENDING SEPTEMBER 30, 2022</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p style="text-align:justify"><span style="font-size:10pt"><span style="text-justify:inter-ideograph"><span style="line-height:normal"><span style="font-family:Calibri,sans-serif"><span style="color:#595959"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">We recommend that EEOC implement strong authentication mechanisms for privileged and non-privileged users in accordance with Federal guidance, to meet the required use of PIV or an Identity Assurance Level (IAL)3/Authenticator Assurance Level (AAL) 3 credential of the agency's networks, including remote access sessions, in accordance with Federal targets. The agency should continue developing their plans for organization-wide use of strong authentication mechanisms for non-privileged users and require multifactor authentication to network access for all user accounts. </span></span></span></span></span></span></span></p>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/670" hreflang="en">PERFORMANCE AUDIT REPORT U.S. EQUAL EMPLOYMENT OPPORTUNITY COMMISSION FEDERAL INFORMATION SECURITY MODERNIZATION ACT OF 2014 (FISMA) FOR THE FISCAL YEAR ENDING SEPTEMBER 30, 2022</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p style="text-align:justify"><span style="font-size:10pt"><span style="text-justify:inter-ideograph"><span style="line-height:normal"><span style="font-family:Calibri,sans-serif"><span style="color:#595959"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">We recommend that EEOC review and remediate the level 4 severity vulnerabilities identified during internal vulnerability scanning to avoid compromises to agency systems.</span></span></span></span></span></span></span></p> <ul> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">To remediate vulnerabilities and prevent further exploitation, the agency should implement risk mitigation procedures such as: performing system updates, operating systems with administrative rights, downloading patches, uninstalling unprotected applications, etc. </span></span></span></span></li> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">Where risk acceptance is required for vulnerabilities based on EEOC's network operations and risk assessments, we recommend that EEOC formally document the risk acceptance along with any associated mitigation activities. </span></span></span></span></li> </ul>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/668" hreflang="en">PERFORMANCE AUDIT REPORT U.S. EQUAL EMPLOYMENT OPPORTUNITY COMMISSION FEDERAL INFORMATION SECURITY MODERNIZATION ACT OF 2014 (FISMA) FOR THE FISCAL YEAR ENDING SEPTEMBER 30, 2022</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p style="text-align:justify"><span style="font-size:10pt"><span style="text-justify:inter-ideograph"><span style="line-height:normal"><span style="font-family:Calibri,sans-serif"><span style="color:#595959"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">We recommend that EEOC review and remediate the medium level severity vulnerabilities identified during external penetration testing by: </span></span></span></span></span></span></span></p> <ul> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">Disabling IKE Aggressive Mode if supported;</span></span></span></span></li> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">Refraining from the use of pre-shared authentication keys;</span></span></span></span></li> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">If using a pre-shared key cannot be avoided, use strong keys;</span></span></span></span></li> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">Do not allow VPN connections from an non-approved IP addresses, if possible.</span></span></span></span></li> </ul>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/671" hreflang="en">PERFORMANCE AUDIT REPORT U.S. EQUAL EMPLOYMENT OPPORTUNITY COMMISSION FEDERAL INFORMATION SECURITY MODERNIZATION ACT OF 2014 (FISMA) FOR THE FISCAL YEAR ENDING SEPTEMBER 30, 2022</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p style="text-align:justify"><span style="font-size:10pt"><span style="text-justify:inter-ideograph"><span style="line-height:normal"><span style="font-family:Calibri,sans-serif"><span style="color:#595959"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">We recommend that EEOC review and remediate the level 5 severity vulnerabilities identified during internal vulnerability scanning to avoid compromises to agency systems.</span></span></span></span></span></span></span></p> <ul> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">To remediate vulnerabilities and prevent further exploitation, the agency should implement risk mitigation procedures such as: applying vendor-released security fixes, disabling certain user access rights, upgrading to the latest supported version, and removing vulnerable/obsolete hardware from its network.</span></span></span></span></li> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">These vulnerabilities should be added and tracked on POAMS.</span></span></span></span></li> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">Where risk acceptance is required for vulnerabilities based on EEOC's network operations and risk assessments, we recommend that EEOC formally document the risk acceptance along with any associated mitigation activities. </span></span></span></span></li> </ul>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/669" hreflang="en">PERFORMANCE AUDIT REPORT U.S. EQUAL EMPLOYMENT OPPORTUNITY COMMISSION FEDERAL INFORMATION SECURITY MODERNIZATION ACT OF 2014 (FISMA) FOR THE FISCAL YEAR ENDING SEPTEMBER 30, 2022</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p style="text-align:justify"><span style="font-size:10pt"><span style="text-justify:inter-ideograph"><span style="line-height:normal"><span style="font-family:Calibri,sans-serif"><span style="color:#595959"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">We recommend that EEOC:</span></span></span></span></span></span></span></p> <ul> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">Determine if listening ports or entire system should be blocked from public access;</span></span></span></span></li> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">Regularly review network device search engines for new systems belonging to EEOC or those that may be masquerading as EEOC systems;</span></span></span></span></li> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">Perform a forensic analysis on identified system to ensure no malicious access has taken place;</span></span></span></span></li> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">For authorized remote sessions, create a control to address remote access being left open after the session has concluded. The controls should at minimum require the session owner to ensure the remote session was closed at the conclusion of the session as well as an overall control run on a set basis that will identify any open remote sessions on endpoints;</span></span></span></span></li> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">Create an auditability feature that checks internally via an agent when a device with remote access is listening;</span></span></span></span></li> <li class="CxSpMiddle" style="text-align:justify"><span style="text-justify:inter-ideograph"><span style="line-height:14.5pt"><span style="font-size:12.0pt"><span style="font-family:"Times New Roman",serif">Create an auditability feature that checks for remote connection software being installed.</span></span></span></span></li> </ul>  </div></div>  </li> </ul> </div>     <div class="recommendation-item-list"> <h3>    PERFORMANCE AUDIT REPORT U.S. EQUAL EMPLOYMENT OPPORTUNITY COMMISSION FEDERAL INFORMATION SECURITY MODERNIZATION ACT OF 2014 (FISMA)  </h3> <ul class="recommendation-item"> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/659" hreflang="en">Performance Audit Report U.S. Equal Employment Opportunity Commission Federal Information Security Modernization Act of 2014 (FISMA)</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>We recommend that EEOC review and remediate the medium level severity vulnerabilities identified during external penetration testing by: (1) Disabling IKE Aggressive Mode. (2) Refraining from the use of pre-shared authentication keys.(3) Implementing multi-factor authentication for all VPN access.</p>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/660" hreflang="en">Performance Audit Report U.S. Equal Employment Opportunity Commission Federal Information Security Modernization Act of 2014 (FISMA)</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>We recommend that EEOC review and remediate the informational vulnerabilities identified during external penetration testing by: (1) Ensuring that passwords meet complexity requirements. (2) Requiring 2-Factor Authentication mechanisms for all externally accessible systems. (3) Recommending that employees not use their work email addresses for personal accounts. (4) Recommending that employees avoid using previously breached passwords.</p>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/656" hreflang="en">Performance Audit Report U.S. Equal Employment Opportunity Commission Federal Information Security Modernization Act of 2014 (FISMA)</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>We recommend that EEOC plans and prepares to meet the goals of the TIC initiative, consistent with OMB M-19-26. The agency should define and customize, as appropriate, a set of policies, procedures, and processes to implement TIC 3.0, including updating its network and system boundary policies, in accordance with OMB M-19-26. This includes, as appropriate, incorporation of TIC security capabilities catalog, TIC use cases, and TIC overlays.</p>  </div></div>  </li> </ul> </div>     <div class="recommendation-item-list"> <h3>    Evaluation of EEOC’s Management of Private Sector Customer Service  </h3> <ul class="recommendation-item"> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/681" hreflang="en">Evaluation of EEOC’s Management of Private Sector Customer Service</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>. EEOC should develop a customer service plan to include establishing goals and objectives, developing performance metrics that target the goals, and measuring performance against the goals. This plan must include goals and metrics for the IIG.</p>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/682" hreflang="en">Evaluation of EEOC’s Management of Private Sector Customer Service</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>EEOC must manage customer expectations by making customer service standards available to the public.</p>  </div></div>  </li> </ul> </div>     <div class="recommendation-item-list"> <h3>    U.S. EQUAL EMPLOYMENT OPPORTUNITY COMMISSION CHARGE CARD PROGRAM  </h3> <ul class="recommendation-item"> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/646" hreflang="en">Performance Audit of the EEOC Commercial Charge Card Program </a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>We recommend EEOC management update its policies and procedures to include all required safeguards and internal controls to be compliant with the Government Charge Card Abuse Prevention Act of 2012. In addition, EEOC should create a monitoring control to review the policy when changes or updates are made to federal law or Office of Management and Budget or General Services Administration guidance</p>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/644" hreflang="en">Performance Audit of the EEOC Commercial Charge Card Program</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>We recommend EEOC ensure that emailed policy memos are promptly updated in the appropriate EEOC Directives Transmittal Order.</p>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/645" hreflang="en">Performance Audit of the EEOC Commercial Charge Card Program</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>For purchase cards, EEOC management should create a control where management reviews, on a sample basis, purchase cards transactions to ensure all obligating documents and purchase orders are in conformity with EEOC Directives Transmittal Order 360.003, Commercial Purchase Charge Card Program Practical User's Guide. For travel cards, EEOC management should create a control where management reviews, on a sample basis, travel card transactions to ensure all travel authorization or vouchers and receipts are in conformity with EEOC Directives Transmittal Order 345.001, Travel and Transportation Administrative Policies and Procedures Manual.</p>  </div></div>  </li> </ul> </div>     <div class="recommendation-item-list"> <h3>    Audit of the U.S. Equal Employment Opportunity Commission’s Fiscal Year 2020 Financial Statements  </h3> <ul class="recommendation-item"> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/648" hreflang="en">Management Letter - FY 2020 Financial Statement Audit </a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>We recommend EEOC management create a control where management reviews, on a sample basis, at least quarterly, the approved PP&E disposals/retirements for conformity to EEOC SOP for OIT Excess Property that states, “When equipment is disposed of, an SF 120, SF 122, or SF 120 copy using GSAXcess, is approved by the EEOC Approving Official, CSD Backup or Property manager, evidenced by their signature and date.” EEOC management should follow-up with Approving Official(s), CSD Backup or Property management who have been found to not adhere to requirements of the SOPs for OIT Excess Property and require them to obtain additional training, to include certifying they have read the Approving Officials responsibilities, as it relates to the aforementioned control. (Repeat Finding)</p>  </div></div>  </li> </ul> </div>     <div class="recommendation-item-list"> <h3>    EVALUATION OF THE EEOC’S SOCIAL MEDIA PROGRAM  </h3> <ul class="recommendation-item"> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/643" hreflang="en">Evaluation of EEOC’s Social Media Program</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>Complete revisions to the social media handbook and provide to all staff managing social media channels.</p>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/640" hreflang="en">Evaluation of EEOC’s Social Media Program</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>Implement a consistent content approval process run by OCLA.</p>  </div></div>  </li> </ul> </div>     <div class="recommendation-item-list"> <h3>    Report 2019-001-EOIG - Evaluation of EEOC’s Contracts Administration Activities  </h3> <ul class="recommendation-item"> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/572" hreflang="en">OCFO should revise EEOC Order 360.001 as needed to assist CORs in performing their duties. Include implementation guidance for contract administration activities, such as submitting contract modifications.</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>OCFO should revise EEOC Order 360.001 as needed to assist CORs in performing their<br> duties. Include implementation guidance for contract administration activities, such as<br> submitting contract modifications.</p>  </div></div>  </li> </ul> </div>     <div class="recommendation-item-list"> <h3>    Report 2018-007-AOIG - Performance Audit Report on the EEOC Charge Card Program: Fiscal Years Ending September 30 2018 and 2017  </h3> <ul class="recommendation-item"> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/708" hreflang="en">FY 2017 and FY 2018 Performance Audit of the U.S. Equal Employment Opportunity Commission Commercial Charge Card Program</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>We recommend that the Office of the Chief Financial Officer of the U.S. Equal<br>Employment Opportunity Commission enhance the documentation, monitoring, and<br>enforcement of its controls over the closure of charge card accounts.<br> </p> <ul> <li>For purchase cards, the Administrative Officer (AO) or District Resources Manager<br>(DRM) should maintain documentation of all account closures electronically or in<br>hard copy. Documentation should include evidence of the name of the AO or DRM<br>who received the employee's charge card, the date the card was turned in, the date the<br>card was physically destroyed, and the date that account closure was confirmed by the<br>Charge Card Vendor. The policy or procedure should include monitoring by the<br>Agency/Organization Program Coordinator (A/OPC) and/or Agency<br>Alternative/Organization Program Coordinator (AA/OPC) and appropriate<br>disciplinary actions for noncompliance.</li> <li>For travel cards, the Charge Card Program Manager (CCPM) should maintain<br>documentation of all account closures electronically or in hard copy. Documentation<br>should include evidence of the name of the immediate supervisor and/or servicing<br>Fiscal<br>Year<br>Report Number Report Name Date Issued<br>2021 2020-002-AOIG Management Letter - FY 2020 Financial<br>Statement Audit<br>12/16/2020<br>1. We recommend EEOC management create a control where management reviews, on a<br>sample basis, at least quarterly, the approved PP&E disposals/retirements for<br>conformity to EEOC SOP for OIT Excess Property that states, “When equipment is disposed of, an SF 120, SF 122, or SF 120 copy using GSAXcess, is approved by the<br>EEOC Approving Official, CSD Backup or Property manager, evidenced by their<br>signature and date.” EEOC management should follow-up with Approving Official(s),<br>CSD Backup or Property management who have been found to not adhere to<br>requirements of the SOPs for OIT Excess Property and require them to obtain additional<br>training, to include certifying they have read the Approving Officials responsibilities,<br>as it relates to the aforementioned control. (Repeat Finding)</li> </ul>  </div></div>  </li> </ul> </div>     <div class="recommendation-item-list"> <h3>    EEOC Federal Hearings and Appeals Processes  </h3> <ul class="recommendation-item"> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/575" hreflang="en">ssign a target amount of days for intake so that management can determine if changes implemented impact the efficiency of the process.</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>Assign a target amount of days for intake so that management can determine if changes<br>implemented impact the efficiency of the process.</p>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/580" hreflang="en">OIT developers should meet directly with software users, such as OFO attorneys and supervisory attorneys and OFP AJs and Supervisory AJs (SAJ) to determine additional requirements.</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>OIT developers should meet directly with software users, such as OFO attorneys and<br> supervisory attorneys and OFP AJs and Supervisory AJs (SAJ) to determine additional<br> requirements.</p>  </div></div>  </li> </ul> </div>     <div class="recommendation-item-list"> <h3>    Report 2017-007-AOIG - Independent Evaluation of the U.S. Equal Employment Opportunity Commission’s Compliance with Provisions of the Federal Information Security Modernization Act of 2014 (FISMA)  </h3> <ul class="recommendation-item"> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/651" hreflang="en">Independent Evaluation of the U.S. Equal Employment Opportunity Commission’s Compliance with Provisions of the Federal Information Security Modernization Act of 2014 (FISMA) </a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>The EEOC should develop and implement a Trusted Internet Connection (TIC) program in accordance with Office of Management and Budget (OMB) requirements to assist in protecting the agency’s network from cyber threats. <strong>(Repeat finding)</strong></p>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/node/652" hreflang="en">Independent Evaluation of the U.S. Equal Employment Opportunity Commission’s Compliance with Provisions of the Federal Information Security Modernization Act of 2014 (FISMA)</a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>The EEOC OIT should fully implement multifactor authentication for logical and remote access enterprise-wide. <strong>(Repeat finding)</strong></p>  </div></div>  </li> </ul> </div>     <div class="recommendation-item-list"> <h3>    Report 2013-008-PSA - Performance Audit of the Agency’s Personnel Security Program  </h3> <ul class="recommendation-item"> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/reports/recommendations/2013-008-psa" hreflang="und">Report 2013-008-PSA - Performance Audit of the Agency’s Personnel Security Program </a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>Develop and implement policies and procedures to address the safeguarding, transfer, storage, or disposal of classified information. The policy should include the requirements for Memorandums of Understanding between agencies.</p>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/reports/recommendations/2013-008-psa-0" hreflang="und">Report 2013-008-PSA - Performance Audit of the Agency’s Personnel Security Program </a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>Implement a formalized training program for individuals who use classified information as a part of their duties. If an external agency is to assume the responsibility of training these individuals, this agreement should be documented in an MOU.</p>  </div></div>  </li> <li>    <div class="views-field views-field-field-report-title"><div class="field-content">    <a href="/reports/recommendations/2013-008-psa-1" hreflang="und">Report 2013-008-PSA - Performance Audit of the Agency’s Personnel Security Program </a>  </div></div><div class="views-field views-field-body"><div class="field-content">    <p>Immediately correct any known weaknesses. If EEOC determines not to correct a noted weakness, EEOC should document this analysis and their acceptance of the associated risk.</p>  </div></div>  </li> </ul> </div>  </div> </div>  </div>  </div> </div>   </div> </section> </main> </div> </div> </div> <footer class="site-footer"> <div class="container-inner"> <div class="container"> <div class="site-footer__top clearfix row">     <section class="row col region region-footer-first">     <nav role="navigation" aria-labelledby="block-usefullinks-menu" id="block-usefullinks" class="block block-menu navigation menu--menu-useful-links"> <h2 id="block-usefullinks-menu">Useful Links</h2>     <ul id="block-usefullinks" class="clearfix nav"> <li class="nav-item"> <a href="http://inspectorsgeneral.org/" title="" class="nav-link">Association of Inspectors General</a> </li> <li class="nav-item"> <a href="https://www.ignet.gov/" title="" class="nav-link">Council of Inspectors General for Integrity and Efficiency</a> </li> <li class="nav-item"> <a href="https://www.eeoc.gov/budget-and-performance" class="nav-link">EEOC Agency Financial Report</a> </li> <li class="nav-item"> <a href="http://eeoc.gov" title="" class="nav-link">Equal Employment Opportunity Commission</a> </li> <li class="nav-item"> <a href="http://www.gao.gov/" title="" class="nav-link">Government Accountability Office</a> </li> <li class="nav-item"> <a href="http://www.whitehouse.gov/omb/" title="" class="nav-link">Office of Management and Budget</a> </li> <li class="nav-item"> <a href="http://www.osc.gov/" title="" class="nav-link">Office of Special Counsel</a> </li> <li class="nav-item"> <a href="HTTPS://OVERSIGHT.GOV" title="" class="nav-link">Oversight.gov</a> </li> <li class="nav-item"> <a href="http://www.usa.gov/" title="" class="nav-link">USA.GOV</a> </li> <li class="nav-item"> <a href="HTTPS://USASPENDING.GOV" title="" class="nav-link">USASpending</a> </li> </ul>  </nav>  </section>      <section class="row col region region-footer-second">     <nav role="navigation" aria-labelledby="block-abouttheoig-menu" id="block-abouttheoig" class="block block-menu navigation menu--menu-about-the-oig"> <h2 id="block-abouttheoig-menu">About the OIG</h2>     <ul id="block-abouttheoig" class="clearfix nav"> <li class="nav-item"> <a href="https://www.ignet.gov/content/ig-act-history" title="" class="nav-link">Inspector General Act History</a> </li> <li class="nav-item"> <a href="https://ignet.gov/content/ig-act" title="" class="nav-link">Inspector General Act</a> </li> <li class="nav-item"> <a href="/node/691" title="Biography: Inspector General Joyce T. Willoughby, Esq." class="nav-link" data-drupal-link-system-path="node/691">Biography: Inspector General Joyce T. Willoughby, Esq.</a> </li> <li class="nav-item"> <a href="https://oig.eeoc.gov/node/688" class="nav-link">Organizational Chart</a> </li> <li class="nav-item"> <a href="https://oig.eeoc.gov/newsstand/18181818/1010/1010" class="nav-link">OIG Strategic Plan </a> </li> <li class="nav-item"> <a href="/newsstand/14141414/1010/0101-0" class="nav-link" data-drupal-link-system-path="node/318">OIG Peer Reviews</a> </li> <li class="nav-item"> <a href="/oig-vision-and-mission-statements" class="nav-link" data-drupal-link-system-path="node/381">OIG Vision and Mission Statements</a> </li> <li class="nav-item"> <a href="/contact" class="nav-link" data-drupal-link-system-path="node/530">General Inquiries - Contact Us</a> </li> <li class="nav-item"> <a href="https://twitter.com/OIGEEOC" title="EEOC OIG Twitter" class="nav-link"><i class="fab fa-twitter" aria-hidden="true"></i> <span class="link-text">Twitter</span></a> </li> <li class="nav-item"> <a href="https://www.linkedin.com/company/eeocoig" class="nav-link"><i class="fab fa-linkedin" aria-hidden="true"></i> <span class="link-text">LinkedIn</span></a> </li> </ul>  </nav>  </section>      <section class="row col region region-footer-third">     <nav role="navigation" aria-labelledby="block-newsstand-menu" id="block-newsstand" class="block block-menu navigation menu--menu-newsstand"> <h2 id="block-newsstand-menu">Newsstand</h2>     <ul id="block-newsstand" class="clearfix nav"> <li class="nav-item"> <a href="https://oig.eeoc.gov/node/693" class="nav-link">Joyce Willoughby Named as EEOC’s New Inspector General</a> </li> <li class="nav-item"> <a href="https://oig.eeoc.gov/node/627" class="nav-link">OIG Priority Recommendations</a> </li> <li class="nav-item"> <a href="https://oig.eeoc.gov/node/626" class="nav-link">Management Challenges</a> </li> <li class="nav-item"> <a href="https://oig.eeoc.gov/node/694" class="nav-link">IG Mayo retires from federal service after 31 years of service in the IG community</a> </li> <li class="nav-item"> <a href="/equal-employment-opportunity-commission-office-inspector-generalcooperative-audit-resolution-and" class="nav-link" data-drupal-link-system-path="node/394">Cooperative Audit Resolution and Oversight Initiative (CAROI)</a> </li> <li class="nav-item"> <a href="https://oig.eeoc.gov/node/690" title="This presentation is an overview of the Office of Inspector General" class="nav-link">Presentation - Office of Inspector General Overview </a> </li> <li class="nav-item"> <a href="https://oig.eeoc.gov/node/689" class="nav-link">Statutory Inspectors General in the Federal Government: A Primer</a> </li> </ul>  </nav>  </section>      <section class="row col region region-footer-fourth">     <nav role="navigation" aria-labelledby="block-auditevaluationreports-menu" id="block-auditevaluationreports" class="block block-menu navigation menu--menu-audit-evaluation-reports"> <h2 id="block-auditevaluationreports-menu">Audit/Evaluation Reports</h2>     <ul id="block-auditevaluationreports" class="clearfix nav"> <li class="nav-item"> <a href="/reports/audit-evaluation-reports" class="nav-link" data-drupal-link-system-path="reports/audit-evaluation-reports">Audit / Evaluations</a> </li> <li class="nav-item"> <a href="/reports/semi-annual" class="nav-link" data-drupal-link-system-path="reports/semi-annual">Semiannual Report to Congress</a> </li> </ul>  </nav>      <div id="block-eeoclogo" class="block-content-basic block block-block-content block-block-content325dae5e-657a-437a-9db8-19b7dc0860a1"> <div class="content">     <div class="clearfix text-formatted field field--name-body field--type-text-with-summary field--label-hidden field__item"><p><img alt="EEOC logo" data-entity-type="file" data-entity-uuid="d5309967-2965-43cf-b604-55b09ac3df92" src="/sites/default/files/inline-images/eeoc-logo_0.png"></p> </div>  </div> </div>  </section>  </div> <div class="site-footer__bottom">     <section class="row col region region-footer-fifth">     <div id="block-copyright" class="block-content-basic block block-block-content block-block-content55eee359-18e5-4d59-9857-c4c4d835ab4a"> <div class="content">     <div class="clearfix text-formatted field field--name-body field--type-text-with-summary field--label-hidden field__item"><div class="bottom-left">Copyright © 2023 EEOC OIG</div> <div class="bottom-right"><a href="/oig-plain-writing-pledge">Plain Writing</a> <a href="/accessibility">Accessibility</a> <a href="/privacy-policy">Privacy Policy</a> <a href="https://www/usa.gov">USA.GOV</a> <a href="/browsers">Browser Compatibility</a></div> </div>  </div> </div>  </section>  </div> </div> </div> </footer> </div> </div>  </div>  <script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","pathPrefix":"","currentPath":"reports\/recommendations","currentPathIsAdmin":false,"isFront":false,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxTrustedUrl":{"\/reports\/recommendations":true,"\/search\/node":true},"user":{"uid":0,"permissionsHash":"3031bf5afa0893e0d6d2e3ea151ed28b1636182fd0093baa0a6098d0aca6d83b"}}</script> <script src="/sites/default/files/js/js_yA4E7xhLF0YAzH5asigp014ry3_ibvzZhRUo10MGW9M.js?scope=footer&delta=0&language=en&theme=barrio_oig&include=eJxLSiwqysyPz89M10_Kzy8pLilKLNBJQgim5eeVJJanFufnpsabIkuk5-QnJeboFpdU5mTmpevANcdD1KDJAwBFYii-"></script> <script src="//kit.fontawesome.com/5b2eec46d6.js"></script> <script src="/sites/default/files/js/js_HHQRp54NOgwczjjgZNLw7S5IKVR2xpBSwjRc_njwcLY.js?scope=footer&delta=2&language=en&theme=barrio_oig&include=eJxLSiwqysyPz89M10_Kzy8pLilKLNBJQgim5eeVJJanFufnpsabIkuk5-QnJeboFpdU5mTmpevANcdD1KDJAwBFYii-"></script>  <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KCKFFG5F" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>  </body> </html>