The Federal Information Security Modernization Act of 2014 (FISMA) provides a comprehensive framework for establishing and ensuring the effectiveness of managerial, operational, and technical controls over information technology (IT) that supports Federal operations and assets and provides a mechanism for improved oversight of Federal agency information security programs. FISMA requires the head of each agency to implement policies and procedures to cost-effectively reduce IT security risks to an acceptable level. FISMA requires agency program officials, Chief Information Officers (CIO)s, Chief Information Security Officers (CISO)s, senior agency officials for privacy, and inspectors general to conduct annual reviews of the agency’s information security program.

The Peace Corps Office of Inspector General (OIG) evaluated the Peace Corps Office of Health Services’ (OHS) policies and procedures for updating its TechnicalGuidelines (TG). The purpose of our evaluation was to determine whether OHS efficiently and adequately updates the TGs and assesses any challenges to theirimplementation. This evaluation also sought to determine to what extent the Peace Corps Medical Officers (PCMO) use TGs in their administrative and clinical practices.

Our audit determined that while the Peace Corps does have an established framework to oversee and monitor domestic awarded contracts, it can improve its management of the following: • Contract oversight including contract modifications, documentation, and guidance for Contract Officer Representatives and Technical Points of Contact; and • Contract completion, including performance assessments and closeout.