Management Implication Report: Allowing Remote Access to Threat Actors
The U.S. Environmental Protection Agency's Office of Inspector General has identified a critical vulnerability concerning software installations on EPA-furnished computers. While information security oversight is the responsibility of the EPA Office of Mission Support, the OIG has identified several instances of unknown third-party threat actors accessing EPA-furnished computers.
This report resulted from an investigation, rather than an audit or evaluation project.
Report Materials
OIG Independence of EPA
The EPA's Office of Inspector General is a part of the EPA, although Congress provides our funding separate from the agency, to ensure our independence. We were created pursuant to the Inspector General Act of 1978, as amended.
Environmental Protection Agency | Office of Inspector General
1200 Pennsylvania Avenue, N.W. (2410T) | Washington, DC 20460 | 202-566-2391
OIG Hotline: 1-888-546-8740.