In the 2020 Yanwei Machinery Company’s annual meeting, Mr. Jiang is giv...

Group photo of all employees of the company in 2015

The https:// ensures that you are connecting to This table presents managements response to the recommendations in the report and the status of the recommendations as of the date of report issuance. The Blue Canopy contracts provided that if the contractor: [I]s determined by the FDIC (at its sole discretion) to provide services essential or critical to the FDIC mission the contractor shall take immediate and effective measures to ensure the availability or use of back-up or redundant services and/or system(s) support to deal with such emergency. The FDIC did not conduct periodic reviews of controls and processes for Critical Functions obtained from Blue Canopy during the contract management process, even though the Agency dedicated more than 38 percent of its Information Technology security budget to Blue Canopy services in 2019. The FDIC response indicated that its planned corrective actions will include surveying recognized practices and procedures associated with contracts supporting essential functions. Corrective Action: The FDICs existing acquisition policy, as a comprehensive framework, incorporates many of the risk management principles referenced by the OIG in its audit and incorporated in OMB Policy Letter 11 01. As such, we have concurred or partially concurred with all of the OIG recommendations. FIDIC Contract Users' Awards 2021 In its response, the FDIC stated that it is committed to continually improving its contracting processes and controls. Separate from the prior OIG review, the FDIC also made a management determination to reduce our reliance on a single contractor for information security and privacy services. However, the FDIC awarded both contracts to Blue Canopy, which did not reduce reliance on a single contractor for information security support services. While the FDIC does not plan to explicitly adopt the critical functions framework from OMB Policy Letter 11-01 or each of the compiled practices set out by the OIG in its report, the FDIC will conduct a survey to identify cost-effective, risk-based controls appropriate for the FDICs unique mission and statutory responsibilities related to essential functions or for services necessary in a business continuity event, particularly when the services may be provided by a single vendor. Through competition, the FDIC is able to compare the value of competing technical proposals and prices in order to determine which proposal affords the best value. The FDIC develops a management oversight strategy for contracts and assigns responsibility to FDIC contracting officers, oversight managers, and technical monitors to oversee contractors based on the risk and complexity of the contract. By signing up, you agree to the receive emails from WashingtonExec. Management should periodically evaluate the adherence to and effectiveness of its internal management controls and procedures to address the objectives and requirements of OMB Policy Letter 11-01. The contract provides various support activities to the Privacy Program. 514 0 obj <>stream The FDIC relied on Blue Canopy to conduct activities within the FDICs Security Operations Center, Computer Security Incident Response Team, and Information Security and Privacy Program Support, which were recognized within NIST guidance as foundational security controls or protective measures that enable an enterprise to perform its mission or critical functions despite risks posed by threats to its use of systems. Without these foundational security controls, the FDIC could not ensure the security, confidentiality, integrity, and availability of its information thus jeopardizing the Agencys mission and operations. Learn about the FDICs mission, leadership, The FDIC has established risk-based processes and procedures to identify, monitor the performance of, and oversee all contracts, and is committed to improving performance in these areas. Program Office conducts market research. Without the identification of procured Critical Functions and its associated risk, the FDIC may not accurately capture and assess the Agencys inherent and residual risk related to its contracts and contractors. endstream endobj 521 0 obj <>stream The Blue Canopy Group, LLC (Blue Canopy) performed a range of cybersecurity and privacy support services for the FDIC. OMB Policy Letter 11-01 requires agencies to identify and ensure that they retain control over Critical Functions that are core to the agencys mission, but may be contracted out to the private sector. According to a CNN news article titled, BearingPoint files for bankruptcy (February 2009), [t]he McLean, Virginia-based company, which began as the consulting arm of KPMG LLP and later struggled with accounting problems and a U.S. Securities and Exchange Commission probe, has been laboring under heavy debt exacerbated by an acquisition spree between 1999 and 2002.. Identified Best Practices and Their Sources, 3. NIST S.P. The GAO report, DHS Service Contracts: Increased Oversight Needed to Reduce the Risk Associated with Contractors Performing Certain Functions (GAO-20-417) (May 2020), found, in part, that DHS did not consistently plan for the level of Federal oversight needed for certain contracts because there was no guidance on how to document and update the number of Federal personnel needed to conduct oversight. 800-53). Within the FDICs Enterprise Risk Management Risk Inventory (October 2019), the FDIC recognized that the Agency was subject to significant risk related to a cyber-attack and/or data breach resulting in the loss of Personally Identifiable Information, and disruptions in system operations and data availability. The FDIC reported procurement information to the FDIC Board of Directors quarterly. testimony on the latest banking issues, learn about policy hL To assist in performing oversight activities for complex contracts for services, the oversight manager must work with the contracting officer to develop a contract management plan. While the Award Profile Reports described the procured services, assessed contractor performance, tracked fund utilization/allocation, and assessed FDIC contract oversight, the FDIC did not identify Blue Canopys procured services as Critical Functions. : 1; Corrective Action: Taken or Planned - The FDIC will consider each of the OIGs recommendations and further study the need for additional risk based controls for essential procurements. Challenge, Quarterly Banking Profile for Fourth Quarter 2022, Quarterly Banking Profile for Third Quarter 2022, FDIC Releases 2021 National Survey of Unbanked and Underbanked Households, Financial Following the FDICs study discussed in response to recommendation 1, the CIOO will assess whether any additional enhancements to the management oversight strategy for the MSSP and SPPS BOAs and task orders are needed beyond those already incorporated. Polski Butik W Chicago, Patrick Childress Obituary, Dylan Petty Net Worth, Ann Alexander Obituary, Articles F