Laws & Regulations

Report: Agreed-Upon Procedures on EPA’s Fiscal Year 2009 First Quarter Financial Statements

Report #09-2-0161, June 8, 2009. We compared the statements with EPA’s crosswalk, recomputed them for mathematical accuracy, and compared them with balances separately generated by us. Except for immaterial rounding differences, the amounts agreed.

Report: Contaminated Soil Waste Repository at East Mission Flats, Idaho

Report #09-P-0162, June 8, 2009. We found that many physical aspects of flooding have been investigated and considered in the design process.

Report: Fiscal Year 2008 and 2007 Financial Statements for the Pesticides Reregistration and Expedited Processing Fund

Report #09-1-0172, June 23, 2009. We noted one significant deficiency in internal controls.

Report: Regional Public Liaison Program Needs Greater Focus on Results and Customer Awareness

Report #09-P-0176, June 24, 2009. OSWER’s RPL program does not sufficiently focus on or measure specific outputs and outcomes and is not consistently implemented across offices.

Report: Steps Taken But More Work Needed to Strengthen Governance, Increase Utilization, and Improve Security Planning for the Exchange Network

Report #09-P-0184, June 30, 2009. This report consists of the briefing presentation we provided to Office of Environmental Information managers on May 4, 2009.

Report: Results of Technical Network Vulnerability Assessment: EPA’s Great Lakes National Program Office

Report #09-P-0185, June 30, 2009. Vulnerability testing conducted in May 2009 of EPA’s Great Lakes National Program Office network identified Internet Protocol addresses with several high-risk vulnerabilities associated with one device.

Report: Results of Technical Network Vulnerability Assessment: EPA’s National Computer Center

Report #09-P-0055, December 9, 2008. Vulnerability testing of EPA’s National Computer Center network identified Internet Protocol addresses with high-risk and medium-risk vulnerabilities.

Report: Results of Technical Network Vulnerability Assessment: Region 8

Report #09-P-0187, June 30, 2009. Vulnerability testing conducted in April 2009 of EPA’s Region 8 network identified Internet Protocol addresses with numerous high-risk vulnerabilities.

Report: Results of Technical Network Vulnerability Assessment: EPA’s Potomac Yard Buildings

Report #09-P-0188, June 30, 2009. Vulnerability testing of EPA’s Potomac Yard buildings network conducted during April 2009 indicated several high-risk vulnerabilities.

Report: Results of Technical Network Vulnerability Assessment: EPA’s 1310 L Street Building

Report #09-P-0189, June 30, 2009. Vulnerability testing of EPA’s 1310 L Street building’s network conducted in April 2009 indicated several high-risk vulnerabilities.

Report: Quality Control Review of Leland O’Neal, CPA, Single Audit for Town of Worthington, West Virginia, for Fiscal Year Ended June 30, 2004

Report #09-2-0195, July 14, 2009. The single audit report for the Town of Worthington, West Virginia, for the fiscal year ending June 30, 2004, was substandard.

Report: Assistance Agreement and Contract Recipients with Open Audit Recommendations May Affect Recovery Act Activities

Report #09-X-0196, July 14, 2009. As of June 30, 2009, EPA used Recovery Act funding to award one assistance agreement and one contract to recipients with open recommendations.

Report: EPA Should Delay Deploying Its New Acquisition System until Testing Is Completed

Report #09-P-0197, July 20, 2009. OAM did not comply with EPA’s System Life Cycle Management policy and procedure while developing the new EPA Acquisition System (EAS).

AWIA Section 2013/SDWA Section 1433: Risk and Resilience Assessments and Emergency Response Plans

Information and resources risk and resilience assessment and emergency response plan requirements under Safe Drinking Water Act (SDWA) section 1433, which was amended by America's Water Infrastructure Act (AWIA) section 2013 in 2018.

Report: EPA’s Human Resources Management System Did Not Deliver Anticipated Efficiencies to the Shared Service Centers

Report #09-P-0206, August 11, 2009. The EPA SSC initiative lacked the necessary management controls to achieve efficiency and effectiveness.

Report: EPA Should Revise its Grant Accrual Methodology to Address Impact of Recovery Act Funds

Report #09-X-0217, August 19, 2009. EPA’s grant accruals for the Fiscal Year 2009 financial statements may not include adjustments for additional funds received under the ARRA.

Report: Office of Inspector General Access to Agency Information and Personnel

Report #09-P-0222, August 25, 2009. At the time of our review, EPA did not have consistent overall guidance governing interaction with the OIG.

Report: EPA Needs to Accelerate Adoption of Numeric Nutrient Water Quality Standards

Report #09-P-0223, August 26, 2009. EPA’s 1998 National Strategy and Plan to promote State adoption of nutrient water quality standards (which better protect aquatic life and human health) has been ineffective.

Report: ECHO Data Quality Audit – Phase I Results: The Integrated Compliance Information System Needs Security Controls to Protect Significant Non-Compliance Data

Report #09-P-0226, August 31, 2009. End users of the Permit Compliance System and Integrated Compliance Information System National Pollutant Discharge Elimination System can override the Significant Non-Compliance data field without more access controls.

Report: Results of Technical Network Vulnerability Assessment: EPA’s Research Triangle Park Finance Center

Report #09-P-0227, August 31, 2009. Vulnerability testing conducted in April 2009 of EPA’s Research Triangle Park Finance Center network identified Internet Protocol addresses with several highrisk vulnerabilities.