COVID-19 and Disaster Assistance Information Systems Security Controls
… control environment was not designed in accordance with federal guidance at the beginning of the COVID-19 … into service without conducting the baseline assessments. With no baseline, the agency could not perform effective … risk management processes. SBA management fully agreed with seven recommendations, disagreed with two …