This report presents the results of our independent performance audit of the U.S. Equal
Employment Opportunity Commission's (EEOC) information security program and practices in
accordance with the Federal Information Security Modernization Act of 2014 (FISMA). FISMA
requires Federal agencies, including EEOC, to have an annual independent evaluation performed
of their information security programs and practices to determine the effectiveness of such
programs and practices, and to report the results of the evaluation to the Office of Management
and Budget (OMB) and the Department of Homeland Security (DHS). The EEOC Office of
Inspector General (OIG) contracted with Harper, Rains, Knight & Company, PA (HRK) to conduct
a performance audit of EEOC's information security program and practices for Fiscal Year (FY)
2024.