In September 2025, the OIG issued a special report on the Peace Corps’ Information Technology environment. OIG contracted with technical subject matter experts to conduct three cybersecurity tests from January 2025 to March 2025. The three tests included a simulated phishing campaign, a review of the agency’s internal vulnerability management practices, and penetration tests that targeted critical Peace Corps systems. While observing the agency’s security processes throughout the assessment, OIG found that the Peace Corps’ monitoring capabilities were able to identify the testing activities and demonstrate its incident response procedures. However, the cybersecurity tests also uncovered multiple vulnerabilities and misconfigurations, ranging from informational issues to critical severity risks that the Peace Corps needs to review and address.

Peace Corps OIG conducted an evaluation of Peace Corps/Madagascar’s programs, operations, and activities from October 2021 to May 2024. OIG evaluation activities included: Volunteer and post staff surveys; interviews with staff, Volunteers, and stakeholders; document collection and analysis; and in-person observations and inspections. The evaluators performed on-site work at the post in May 2024, where they closely collaborated with post leadership and staff to learn more about past and present operations. During this review, OIG traveled to Volunteers’ homes and work sites for in-person observations and interviews.