Embassy Hanoi and Consulate General Ho Chi Minh - OIG - US ...

More documents

Recommendations

Info

SENSITIVE BUT UNCLASSIFIED Embassy Hanoi does not have complete and accurate standard operating procedures. Informal Recommendation 20: Embassy Hanoi should review and correct the current procedures and develop and document any missing procedures. The local CCB has not approved several applications in the April 2005 regional computer security officer report that are already on the Hanoi system. Furthermore, the embassy has not notified the Department of these local applications. Informal Recommendation 21: Embassy Hanoi should have the local change control board approve all nonbaseline software that is used on the systems in Hanoi and Ho Chi Minh City. Locally developed applications have not been submitted to the Department for approval and certification and accreditation. These applications include a trouble ticket application (discussed above), a GSO vehicle request application, and a travel order request application. Informal Recommendation 22: Embassy Hanoi should remove locally developed applications from the system until the Department has approved them. If approved, the embassy should submit the applications for certification and accreditation. The public affairs section purchased software for tracking contacts that was not approved by the information management office or the local CCB. Informal Recommendation 23: Embassy Hanoi should approve the software and coordinate all future purchases through the information management office. Embassy management cannot approve the contingency and site security plans because the plans contain errors and inaccurate descriptions of processes. Additionally, the contingency plan has not been coordinated with the emergency action plan as required by 12 FAM 600. Informal Recommendation 24: (b) (2)(b) (2)(b) (2)(b) (2)(b) (2) (b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2) (b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2) (b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2) (b) (2)(b) (2) OIG Report No. ISP-I-05-28A, Inspection of Embassy Hanoi and CG Ho Chi Minh City, Vietnam, September 2005 SENSITIVE BUT UNCLASSIFIED 67 .
SENSITIVE BUT UNCLASSIFIED Informal Recommendation 25: . The public affairs section and the protocol section maintain individual databases to track contacts. One reason given for the use of multiple applications was an issue of who would control the input. Coordination between the public affairs section (including the IRC) and the information management office needs to be improved. Informal Recommendation 26: Embassy Hanoi should select one database for contacts and establish multiple points of input with one person assigned for quality control and establish processes where information management is in the loop on all information technology issues. Mission Vietnam has two Internet web sites: Hanoi and Ho Chi Minh City. The web sites contain erroneous, incorrect, and outdated information. The information management office maintains the embassy Intranet page. Informal Recommendation 27: Embassy Hanoi should establish procedures to ensure that information on mission web sites is current and correct, and require supervisory review and approval of contents. All web sites are to comply with Section 508 of the Rehabilitation Act. Informal Recommendation 28: Embassy Hanoi should request that the Department review web sites for compliance and address deficiencies. Two information management specialists support the classified network in Embassy Hanoi. The two first-tour specialists in Consulate General Ho Chi Minh City do not have experience on the classified network. Informal Recommendation 29: The mission should provide Ho Chi Minh City personnel the opportunity to work on the classified system. The regional computer security officer completed a computer security assessment of Embassy Hanoi and Consulate General Ho Chi Minh’s Sensitive But Unclassified and classified networks. Some weaknesses still exist. Informal Recommendation 30: Embassy Hanoi should correct all weaknesses identified in the regional computer security officer’s security assessment. (b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2) (b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2)(b) (2) 68 . OIG Report No. ISP-I-05-28A, Inspection of Embassy Hanoi and CG Ho Chi Minh City, Vietnam, September 2005 SENSITIVE BUT UNCLASSIFIED
Page 1 and 2:
SENSITIVE BUT UNCLASSIFIED United S
Page 3 and 4:
Community Liaison Offices . . . . .
Page 5 and 6:
SENSITIVE BUT UNCLASSIFIED • The
Page 7 and 8:
SENSITIVE BUT UNCLASSIFIED That so
Page 9 and 10:
SENSITIVE BUT UNCLASSIFIED EMBASSY
Page 11 and 12:
SENSITIVE BUT UNCLASSIFIED tioned w
Page 13 and 14:
SENSITIVE BUT UNCLASSIFIED The Bila
Page 15 and 16:
SENSITIVE BUT UNCLASSIFIED The Amba
Page 17 and 18:
SENSITIVE BUT UNCLASSIFIED 14 . OIG
Page 19 and 20: SENSITIVE BUT UNCLASSIFIED Strong r
Page 21 and 22: SENSITIVE BUT UNCLASSIFIED The cons
Page 23 and 24: SENSITIVE BUT UNCLASSIFIED evenly.
Page 25 and 26: SENSITIVE BUT UNCLASSIFIED Recommen
Page 27 and 28: SENSITIVE BUT UNCLASSIFIED Contacts
Page 29 and 30: SENSITIVE BUT UNCLASSIFIED requests
Page 31 and 32: SENSITIVE BUT UNCLASSIFIED run a wi
Page 33 and 34: SENSITIVE BUT UNCLASSIFIED points o
Page 35 and 36: SENSITIVE BUT UNCLASSIFIED CONSULAR
Page 37 and 38: SENSITIVE BUT UNCLASSIFIED Fraud Pr
Page 39 and 40: SENSITIVE BUT UNCLASSIFIED 36 . OIG
Page 41 and 42: SENSITIVE BUT UNCLASSIFIED ADMINIST
Page 45 and 46: SENSITIVE BUT UNCLASSIFIED handled
Page 47 and 48: SENSITIVE BUT UNCLASSIFIED GENERAL
Page 49 and 50: SENSITIVE BUT UNCLASSIFIED INFORMAT
Page 51 and 52: SENSITIVE BUT UNCLASSIFIED City as
Page 53 and 54: SENSITIVE BUT UNCLASSIFIED Technica
Page 55 and 56: SENSITIVE BUT UNCLASSIFIED and qual
Page 57 and 58: SENSITIVE BUT UNCLASSIFIED $30,000
Page 61 and 62: SENSITIVE BUT UNCLASSIFIED requirem
Page 67 and 68: SENSITIVE BUT UNCLASSIFIED Informal
Page 69: SENSITIVE BUT UNCLASSIFIED Informal
Page 73 and 74: SENSITIVE BUT UNCLASSIFIED Manageme
Page 77: FRAUD, WASTE, ABUSE, OR MISMANAGEME
show all

Embassy Hanoi and Consulate General Ho Chi Minh - OIG - US ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?