Audit of the Department’s Security Controls for Cloud-Based High Value Assets

We are initiating an audit of the U.S. Department of Commerce’s (the Department’s) security controls for cloud-based high value assets (HVAs). Our objective is to verify that the Department implemented security controls for cloud-based HVAs in accordance with federal requirements. We plan to begin this work immediately. We will contact your audit liaisons to schedule an entrance conference, at which time we will discuss in further detail the specific nature of our audit—including our objective and scope, time frames, and any potential needs for us to be provided data. If you have any questions regarding this audit, please contact me at (202) 482-1931 or Chuck Mitchell, Director for Cybersecurity, at (202) 809-9528. We thank you in advance for your cooperation.