UNITED STATES
DEPARTMENT OF LABOR

Audit and Other Reports

Listed below are the results of your search. If you are unable to find an audit report, please email us or visit our FOIA page to request a report through the FOIA process.

1. DOL Implemented Its Wireless Network Securely, Though Security Gaps Exist in Testing, Updating, Patching, and Continuous Review
   Report No. 23-24-003-07-720 (September 11, 2024)
This report contains Sensitive Information and will not be posted
2. FY 2023 FISMA DOL Information Security Report: Making Improvements Toward An Effective Program
   Report No. 23-24-001-07-725 (December 6, 2023)
[ Summary ] | [ Full Report ] {1.26 MB} | [ Response ]
3. Without an IT Modernization Framework, DOL Is Vulnerable to Inadequate Resource Prioritization for Ensuring Security and Availability of DOL Systems
   Report No. 23-24-002-07-725 (November 17, 2023)
[ Summary ] | [ Full Report ] {1.83 MB} | [ Response ]
4. FY 2022 FISMA DOL Information Security Report: DOL'S Information Security Program Not Remaining Current with Security Requirements
   Report No. 23-23-001-07-725 (February 10, 2023)
[ Summary ] | [ Full Report ] {357 KB} | [ Response ]
5. FY2021 FISMA DOL Information Security Report: Information Security Continuous Monitoring Controls Remain Deficient
   Report No. 23-22-001-07-725 (January 28, 2022)
[ Summary ] | [ Full Report ] {1 MB} | [ Response ]
6. FY 2020 FISMA DOL Information Security Report: Progress Needed to Improve Risk Management and Continuous Monitoring Information Security Controls
   Report No. 23-21-001-07-725 (December 22, 2020)
[ Summary ] | [ Full Report ] {1.91 MB} | [ Response ]
7. DOL Could Improve Areas of Physical Security to Help Effectively Safeguard Employees
   Report No. 17-20-001-07-001 (May 21, 2020)
This report contains Sensitive Information and will not be posted
8. FY 2019 FISMA DOL Information Security Report Implementation of Security Tools Hindered by Insufficient Planning
   Report No. 23-20-002-07-725 (December 23, 2019)
[ Summary ] | [ Full Report ] {1.44 MB} | [ Response ]
9. Stronger Controls Needed Over Web Application Security
   Report No. 23-20-001-07-725 (November 14, 2019)
[ Summary ] | [ Full Report ] {1.06 MB} | [ Response ]
10. Department of Labor Needs Improvements in Managing Its Records Management Program for Capturing Electronic Messages to Preserve Federal Records
    Report No. 17-19-001-07-001 (September 20, 2019)
[ Summary ] | [ Full Report ] {620 KB} | [ Response ] | [ Video Summary ]
11. FY 2018 FISMA DOL Information Security
    Report No. 23-19-001-07-725 (March 13, 2019)
No Summary | [ Full Report ] {3.61 MB} | [ Response ]
12. OASAM Could Improve Oversight of Purchase Card Transactions
    Report No. 17-18-002-07-001 (March 23, 2018)
[ Summary ] | [ Full Report ] {713 KB} | [ Response ]
13. FY 2017 FISMA DOL Information Security Report
    Report No. 23-18-001-07-725 (December 29, 2017)
No Summary | [ Full Report ] {640 KB} | [ Response ]
14. FY 2016 FISMA DOL Information Security Report
    Report No. 23-17-002-07-725P (September 29, 2017)
This is the public version of Report Number 23-17-002-07-725, issued on .
No Summary | [ Full Report ] {2.52 MB} | [ Response ]
15. FISMA FISCAL YEAR 2015: Ongoing Security Deficiencies Exist
    Report No. 23-16-002-07-725P (November 30, 2016)
This is the public version of Report Number 23-16-002-07-725, issued on September 30, 2016.
[ Summary ] | [ Full Report ] {1.45 MB} | [ Response ]
16. FISMA FISCAL YEAR 2015: Ongoing Security Deficiencies Exist
    Report No. 23-16-002-07-725 (September 30, 2016)
This report contains Sensitive Information and will not be posted
17. Report on U.S. Department of Labor's Policies and Guidelines in Accordance with the Cybersecurity Act of 2015, Section 406
    Report No. 23-16-007-07-720 (August 15, 2016)
No Summary | [ Full Report ] {640 KB}
18. OASAM Needs to Strengthen Controls over the Purchase Card Program
    Report No. 17-15-003-07-001 (September 29, 2015)
[ Summary ] | [ Full Report ] {949 KB} | [ Response ]
19. Information Security Concerns
    Report No. 23-15-009-07-725 (July 31, 2015)
No Summary | [ Full Report ] {145 KB} | [ Response ]
20. Alert Memorandum: Vulnerability in OWCP FECA Bill Pay Processing System
    Report No. 50-15-002-07-725 (July 28, 2015)
This report contains Sensitive Information and will not be posted
21. Fiscal Year 2014 Financial Statements Audit: General and Application Controls Testing Results for the Employee Computer Network/Departmental Computer Network; Acquisition Management System; and HRConnect/WebTA
    Report No. 22-15-011-07-001 (March 31, 2015)
This report contains Sensitive Information and will not be posted
22. Cyber Security Program Improvements Are Needed To Better Secure DOL's Major Information Systems
    Report No. 23-15-001-07-725 (March 31, 2015)
[ Summary ] | [ Full Report ] {481 KB} | [ Response ]
23. Allegation of Wasteful Spending Related to a Contract with Concepts, Inc.
    Report No. 17-15-001-07-001 (November 21, 2014)
No Summary | [ Full Report ] {798 KB} | [ Response ]
24. Verification of the Office of the Chief Information Officer's Remediation Efforts of Prior-Year Information Technology Security Recommendations
    Report No. 23-15-006-07-725 (November 14, 2014)
This report contains Sensitive Information and will not be posted
25. Verification of Office of the Assistant Secretary for Administration and Management's Remediation Efforts of Prior-Year Information Technology Security Recommendations
    Report No. 23-14-017-07-727 (September 30, 2014)
This report contains Sensitive Information and will not be posted
26. DOL Compliance with Federal Environmental and Energy Performance Requirements
    Report No. 17-14-002-07-001 (September 29, 2014)
No Summary | [ Full Report ] {800 KB} | [ Response ]
27. FY 2013 Audit of the Consolidated Financial Statements - Information Technology Control Deficiencies Related to the OASAM E-Procurement System and Employee Computer Network/Departmental Computer Network
    Report No. 22-14-016-07-001 (March 31, 2014)
This report contains Sensitive Information and will not be posted
28. Verification of Office of the Chief Information Officer Remediation Efforts for Prior-Year Information Technology Security Recommendations
    Report No. 23-14-001-07-725 (March 31, 2014)
This report contains Sensitive Information and will not be posted
29. Verification of Office of the Assistant Secretary for Administration and Management Remediation Efforts for Prior-Year Information Technology Security Recommendations
    Report No. 23-14-002-07-727 (March 31, 2014)
This report contains Sensitive Information and will not be posted
30. Improvements Needed to DOL's Capital Planning and Investment Controls for Managing Information Technology Investments
    Report No. 23-14-009-07-723 (March 25, 2014)
[ Summary ] | [ Full Report ] {1.15 MB} | [ Response ]
31. HR Works Implementation Review
    Report No. 23-14-011-07-727 (February 10, 2014)
This report contains Sensitive Information and will not be posted
32. Cloud Email Services Implementation Review
    Report No. 23-14-010-07-727 (January 31, 2014)
This report contains Sensitive Information and will not be posted
33. Fiscal Year 2013 Federal Information Security Management Act: DOL Entity-wide Testing
    Report No. 23-14-006-07-725 (November 14, 2013)
This report contains Sensitive Information and will not be posted
34. Summary of Findings Related to Selected Systems Tested During the FY 2012 Consolidated Financial Statement Audit and the Statement on SSAE No. 16 SOC 1 Examination for the Period October 1, 2011, through June 30, 2012
    Report No. 22-13-007-07-001 (April 3, 2013)
This report contains Sensitive Information and will not be posted
35. The Department of Labor Needs a Better Process to Sanitize Electronic Media Prior to Disposal
    Report No. 23-13-006-07-001 (March 29, 2013)
This report contains Sensitive Information and will not be posted
36. Department's Information Technology Security Program Is Weakened By Deficiencies
    Report No. 23-13-008-07-001 (March 29, 2013)
This report contains Sensitive Information and will not be posted
37. FY 2012 Audit of Consolidated Financial Statements - Information Technology Control Deficiencies Related to the OASAM E-Procurement System and Employee Computer Network/Departmental Computer Network
    Report No. 22-13-013-07-001 (January 30, 2013)
This report contains Sensitive Information and will not be posted
38. OIG Results for DOL's FY 2012 Federal Information Security Management Act Reporting
    Report No. 23-13-005-07-001 (December 19, 2012)
This report contains Sensitive Information and will not be posted
39. Departmental eRecruit/DOORS System Testing
    Report No. 23-13-004-07-001 (October 10, 2012)
This report contains Sensitive Information and will not be posted
40. Verification of Office of Chief Information Officer Remediation Efforts of Prior-Year Information Technology Security Recommendations
    Report No. 23-13-001-07-720 (October 4, 2012)
This report contains Sensitive Information and will not be posted
41. Verification of Office of Assistant Secretary for Administration and Management Remediation Efforts of Prior-Year Information Technology Security Recommendations
    Report No. 23-13-002-07-001 (October 4, 2012)
This report contains Sensitive Information and will not be posted
42. Vulnerability Assessment for Division of Information Technology Management System
    Report No. 22-12-022-07-001 (September 28, 2012)
This report contains Sensitive Information and will not be posted
43. Personal Identity Verification II(PIV-II) System Testing
    Report No. 23-12-020-07-001 (September 28, 2012)
This report contains Sensitive Information and will not be posted
44. Department-wide Security Issues
    Report No. 23-12-024-07-001 (September 28, 2012)
This report contains Sensitive Information and will not be posted
45. Department's Information Technology Security Program is Weakened by Deficiencies
    Report No. 23-12-007-07-001 (September 27, 2012)
This report contains Sensitive Information and will not be posted
46. Alert Memorandum: OALJ is Using Unauthorized Apple iPads that are not FIPS 140-2 Compliant
    Report No. 23-12-010-07-001 (September 26, 2012)
This report contains Sensitive Information and will not be posted
47. Alert Memorandum: DOL Needs to Take Immediate Action to Correct Security Weaknesses in the PIV-II System
    Report No. 23-12-009-07-001 (September 7, 2012)
This report contains Sensitive Information and will not be posted
48. Summary of Findings Related to Selected Systems Tested during the FY 2011 Consolidated Financial Statement Audit and SAS 70 Examination
    Report No. 22-12-007-07-001 (August 23, 2012)
This report contains Sensitive Information and will not be posted
49. Alert Memorandum: DOL Needs to Immediately Take Corrective Action to Safeguard BLS Information
    Report No. 23-12-006-07-001 (June 19, 2012)
No Summary | [ Full Report ] {57 KB} | [ Response ]
50. OIG Review of Complaint Filed by Waterfront Technologies, Inc.
    Report No. 17-12-003-07-711 (April 24, 2012)
No Summary | [ Full Report ] {512 KB}
51. Department Oversight Needs to be Strengthened to Minimize Procurement Risk
    Report No. 17-12-002-07-711 (March 30, 2012)
[ Summary ] | [ Full Report ] {343 KB} | [ Response ]
52. DOL Successfully Implementing Outstanding Recommendations, but Timeliness and Accuracy are Issues
    Report No. 23-12-003-07-001 (March 30, 2012)
This report contains Sensitive Information and will not be posted
53. Federal Information Security Management Act Departmental Security Issues
    Report No. 23-12-002-07-001 (March 19, 2012)
This report contains Sensitive Information and will not be posted
54. Alert Memorandum: DOL Needs to Immediately Take Corrective Action to Safeguard Information Technology Equipment
    Report No. 23-12-005-07-001 (March 1, 2012)
No Summary | [ Full Report ] {88 KB} | [ Response ]
55. Consolidated Financial Statements Audit of OASAM's E-Procurement System and Employee Computer Network/Departmental Computer Network
    Report No. 22-12-012-07-001 (February 22, 2012)
This report contains Sensitive Information and will not be posted
56. Federal Information Security Management Act Audit of OASAM E-Procurement System and Employee Computer Network/Departmental Computer Network
    Report No. 23-11-029-07-001 (September 30, 2011)
This report contains Sensitive Information and will not be posted
57. Federal Information Security Management Act Audit of OCIO Entity-wide IT Security Controls
    Report No. 23-11-030-07-001 (September 30, 2011)
This report contains Sensitive Information and will not be posted
58. Federal Information Security Management Act Audit of OASAM's Safety & Health Information Management System
    Report No. 23-11-025-07-001 (September 29, 2011)
This report contains Sensitive Information and will not be posted
59. Verification of OCIO Remediation Efforts of Prior-Year IT Security Recommendations
    Report No. 23-11-016-07-720 (September 22, 2011)
This report contains Sensitive Information and will not be posted
60. Significant Deficiencies Persist in DOL's Information Technology Security Program
    Report No. 23-11-005-07-001 (September 21, 2011)
This report contains Sensitive Information and will not be posted
61. Verification of OASAM Remediation Efforts of Prior-Year IT Security Recommendations
    Report No. 23-11-012-07-001 (September 14, 2011)
This report contains Sensitive Information and will not be posted
62. Improvements Are Needed in DOL IT Security Remediation Efforts
    Report No. 23-11-002-07-001 (September 14, 2011)
This report contains Sensitive Information and will not be posted
63. Information Technology Security Conditions Needing Management Action Exist for DOL Support Portal File Share
    Report No. 23-11-018-07-001 (September 2, 2011)
This report contains Sensitive Information and will not be posted
64. The Department Could Do More To Strengthen Controls Over Its Personal Identity Verification System
    Report No. 04-11-001-07-001 (March 31, 2011)
This report contains Sensitive Information and will not be posted
65. Findings over General and Application Controls for Selected DOL Information Technology Systems Identified in the Engagement to Audit the Consolidated Financial Statements for the Year Ended September 30, 2010
    Report No. 22-11-007-07-001 (March 31, 2011)
This report contains Sensitive Information and will not be posted
66. OASAM - Notification of NOFRs Related to the General and Application Controls Testing Pertaining to the Fiscal Year 2010 Audit of the Department of Labor's (DOL) Consolidated Financial Statement Audit
    Report No. 22-11-012-07-001 (March 31, 2011)
This report contains Sensitive Information and will not be posted
67. Ineffective Accounting for Sensitive Information Technology Hardware and Software Assets Places DOL at Significant Risk
    Report No. 23-11-001-07-001 (March 31, 2011)
[ Summary ] | [ Full Report ] {977 KB} | [ Response ]
68. Inspector General 2010 Annual FISMA Report
    Report No. 23-11-004-07-001 (November 15, 2010)
This report contains Sensitive Information and will not be posted
69. Notifications of Findings and Recommendations Related to the Federal Information Security Management Act Audit
    Report No. 23-11-003-07-001 (November 1, 2010)
This report contains Sensitive Information and will not be posted
70. Recovery Act: Use of Departmental Management Funds
    Report No. 18-10-011-07-001 (September 17, 2010)
No Summary | [ Full Report ] {50 KB}
71. Recovery Act: OASAM Needs to Ensure that Job Corps Contract Modifications Meet Recovery Act Requirements
    Report No. 18-10-005-07-001 (March 30, 2010)
[ Summary ] | [ Full Report ] {280 KB} | [ Response ]
72. Actions Required to Resolve Significant Deficiencies and Improve DOL's Overall IT Security Program
    Report No. 23-10-001-07-001 (March 30, 2010)
This report contains Sensitive Information and will not be posted
73. Findings over General and Application Controls for Selected DOL Information Technology Systems Identified in an Audit of the Consolidated Financial Statements for the Year Ended September 30, 2009
    Report No. 22-10-007-07-001 (March 15, 2010)
This report contains Sensitive Information and will not be posted
74. Audit of DOL's Fiscal Year 2008 Procurement Data Reported in the Federal Procurement Data System - Next Generation
    Report No. 03-10-001-07-711 (February 22, 2010)
[ Summary ] | [ Full Report ] {221 KB} | [ Response ]
75. Notifications of Findings and Recommendations Related to the Federal Information Security Management Act Audit
    Report No. 23-10-002-07-001 (January 29, 2010)
This report contains Sensitive Information and will not be posted
76. OASAM Information System Recommendations Pertaining to the Financial Reporting in the Department's Performance and Accountability Report
    Report No. 22-10-012-07-001 (November 9, 2009)
This report contains Sensitive Information and will not be posted
77. The Office of the Assistant Secretary for Administration and Management Needs to Strengthen Its Oversight of the Purchase Card Program
    Report No. 06-09-003-07-001 (September 3, 2009)
[ Summary ] | [ Full Report ] {240 KB} | [ Response ]
78. Notifications of Findings and Recommendations Related to the Federal Information Security Management Act Audit of: the Civil Rights Center Title VI/VII Information Center
    Report No. 23-09-004-07-001 (September 2, 2009)
This report contains Sensitive Information and will not be posted
79. Findings over General and Application Controls for Selected DOL Information Technology Systems Identified in an Audit of the Consolidated Financial Statements for the Year Ended September 30, 2008
    Report No. 22-09-007-07-001 (February 9, 2009)
This report contains Sensitive Information and will not be posted
80. The Department of Labor Security Program Does Not Result in Full Implementation of Minimum Security Controls
    Report No. 23-09-001-07-001 (November 26, 2008)
This report contains Sensitive Information and will not be posted
81. OASAM Information System Recommendations Pertaining to the Financial Reporting in the Department's Performance and Accountability Report Audit
    Report No. 22-09-012-07-001 (October 28, 2008)
This report contains Sensitive Information and will not be posted
82. The Department of Labor's Controls Over Sole Source Procurements Need Strengthening
    Report No. 03-08-002-07-711 (September 30, 2008)
[ Summary ] | [ Full Report ] {1.86 MB} | [ Response ]
83. Status of Recommendations Provided to OASAM in Notifications of Findings and Recommendations Cited in the Audit Report: Department of Labor Needs to Remedy Significant Security Control Deficiencies in Access Controls and in the VETS, USERRA Information Management
    Report No. 22-08-013-07-001 (September 30, 2008)
This report contains Sensitive Information and will not be posted
84. Notification of Findings and Recommendations Related to the Federal Information Security Management Act
    Report No. 23-08-017-07-001 (September 17, 2008)
This report contains Sensitive Information and will not be posted
85. Inspector General's FY08 Federal Information Security Management Act OMB Template and Appendix
    Report No. 23-08-018-07-001 (September 16, 2008)
This report contains Sensitive Information and will not be posted
86. The Department of Labor's Records Management Program Controls Need Strengthening
    Report No. 03-08-001-07-001 (September 15, 2008)
[ Summary ] | [ Full Report ] {3.44 MB} | [ Response ]
87. Evaluation of the Department of Labor's Privacy Impact Assessment Process
    Report No. 23-08-003-07-001 (August 4, 2008)
This report contains Sensitive Information and will not be posted
88. Results from the Audits of General, Application, and Security Controls for Selected DOL Information Technology Systems that Support the FY 2007 Financial Statements
    Report No. 22-08-007-07-001 (March 31, 2008)
This report contains Sensitive Information and will not be posted
89. Complaint Involving the Department of Labor's Competitive Sourcing of Finance and Accounting Positions
    Report No. 03-07-002-07-711 (September 28, 2007)
[ Summary ] | [ Full Report ] {354 KB} | [ Response ]
90. Department of Labor Needs to Remedy Significant Security Control Deficiencies in Access Controls and in the Veterans' Employment and Training Service, Uniformed Services Employment and Reemployment Rights Act Information Management System Security Program
    Report No. 23-07-004-07-001 (September 28, 2007)
This report contains Sensitive Information and will not be posted
91. Department of Labor Records Management Program Management Letter
    Report No. 03-07-004-07-001 (September 24, 2007)
No Summary | [ Full Report ] {236 KB}
92. FY 2006 Findings and Recommendations Related to General, Application, and Security Controls for Selected DOL Information Technology Financial Systems
    Report No. 22-07-010-07-001 (September 12, 2007)
This report contains Sensitive Information and will not be posted
93. Evaluation of the Department's Compliance of OMB M-06-16, Protection of Sensitive Agency Data
    Report No. 23-07-001-07-001 (March 30, 2007)
This report contains Sensitive Information and will not be posted
94. There Is No Evidence Contracting Officers Are Checking Required Sources Before Making GSA Schedule Procurements
    Report No. 05-06-004-07-001 (September 15, 2006)
[ Summary ] | [ Full Report ] {484 KB} | [ Response ]
95. Award and Management of Contracts for Encryption Software Were Significantly Flawed
    Report No. 05-05-005-07-720 (March 31, 2005)
[ Summary ] | [ Full Report ] {695 KB} | [ Response ]
96. Rural Development Act of 1972 Agreed-Upon Procedures Report
    Report No. 21-04-005-07-711 (July 21, 2004)
No Summary | [ Full Report ] {10.5 MB}
97. Department of Labor Fitness Association, Inc. Modified Cash Basis Financial Statements For the Year Ended September 30, 2001
    Report No. 03-03-003-07-780 (September 26, 2003)
No Summary | [ Full Report ] {65 KB} | [ Response ]
98. Evaluation of the Department of Labor's Purchase Card Program (Originally issued as Evaluations Report No. 2E-09-001-0002)
    Report No. 21-03-021-07-711 (December 4, 2002)
No Summary | [ Full Report ] {193 KB} | [ Response ]
99. Evaluation of DOL's Presidential Management Intern Program: Office of the Assistant Secretary for Administration and Management
    Report No. 2E-07-753-0002 (September 26, 2002)
No Summary | [ Full Report ] {255 KB}
100. Evaluation of DOL's Travel Card Program: Office of Chief Financial Officer and Office of the Assistant Secretary for Administration and Management
     Report No. 2E-07-001-0001 (March 26, 2002)
No Summary | [ Full Report ] {558 KB}
101. Evaluation of the Department of Labor's Fleet Management Program
     Report No. 2E-07-711-0001 (March 4, 2002)
No Summary | [ Full Report ] {191 KB}
102. National Association of Counties -- Audit of Financial Status Report for July 1, 1997 through April 30, 1998 and Indirect Cost Proposal for Calendar Year 1998
     Report No. 03-01-003-07-735 (September 21, 2001)
No Summary | [ Full Report ] {153 KB}
103. Department of Labor is Refocusing Efforts to Improve Physical Security of its Minimum Essential Infrastructure
     Report No. 23-01-002-07-711 (July 20, 2001)
No Summary | [ Full Report ] {30 KB} | [ Response ]
104. Final 2000 CIO
     Report No. 22-01-010-07-001 (February 23, 2001)
No Summary | [ Full Report ] {205 KB}
105. DOL Water and Sewage Payments to D.C. Government
     Report No. 21-01-001-07-711 (February 13, 2001)
No Summary | [ Full Report ] {16 KB}
106. Review of the Department of Labor's Random Drug Testing Program
     Report No. 2E-07-780-0001 (October 10, 2000)
No Summary | [ Full Report ] {136 KB}
107. Evaluation of the Department of Labor's Policies and Procedures to Debar or Suspend Federal Contractors
     Report No. 2E-07-740-0001 (September 28, 2000)
No Summary | [ Full Report ] {289 KB}
108. Review of Space Utilization in the Frances Perkins Building
     Report No. 2E-07-731-0001 (September 27, 2000)
No Summary | [ Full Report ] {122 KB}

The OIG uses Adobe Acrobat to prepare its audit reports for the Internet. If you experience problems accessing the PDF files, you may want to download the latest version of the Adobe Acrobat Reader by clicking on the link provided below.

Get Adobe Reader

Quick Links