Reports

The Department of Homeland Security has limited ability to track migrants’ post-release addresses accurately and effectively. U.S. Border Patrol (USBP) cannot always obtain and does not always record migrant addresses, and U.S. Immigration and Customs Enforcement (ICE) does not always validate migrant addresses prior to migrant release into the United

Water crises threaten the security and resilience of our nation’s critical infrastructure. This report identifies the challenges we are confronted with and provides recommendations to address them. The NIAC has several recommendations. VIEW FULL REPORT

A collection of components associated with Sandworm designed to enable remote access and exfiltrate information from Android phones.

CBP is responsible for detecting, deterring, and disrupting transnational organized crime that threatens U.S. security interests at and beyond the border. This audit was conducted to determine the extent to which CBP uses outbound inspections to prevent the illegal exportation of currency, firearms, explosives, ammunition, and narcotics at land

The Federal Emergency Management Agency (FEMA) did not ensure state and local law enforcement agencies accounted for and expended Presidential Residence Protection Assistance (PRPA) grant funds in accordance with Federal regulations and component guidelines. Three recommendations to improve FEMA’s management of the PRPA grant program were made.

U.S. Immigration and Customs Enforcement (ICE) did not consistently implement effective access controls to restrict access to its network and information technology (IT) systems. Although ICE took a multi-layered approach to managing access for personnel who change positions or leave the component altogether, we determined that ICE did not consistently

Mobile devices, such as smartphones and tablets, are critical for FEMA’s workforce to successfully complete its mission. While mobile devices increase workforce mobility and productivity, they also introduce risks including cyber threats or loss of sensitive government data. An audit was conducted to determine whether FEMA secures its mobile devices

U.S. Customs and Border Protection (CBP) apprehended and subsequently released a migrant without providing information requested by the Federal Bureau of Investigation’s Terrorist Screening Center (TSC) that would have confirmed the migrant was a positive match with the Terrorist Screening Data Set (Terrorist Watchlist). This occurred because CBP’s ineffective practices

FBI and DHS conduct’s full internal reviews of their actions in the lead-up to January 6th, improve their processes for assessing and sharing intelligence (including open-source intelligence on social media), designate Joint Sessions of Congress to certify the Presidential election as a National Special Security Event, and improve inter-agency coordination

The Department of Homeland Security’s reviewed information security programs for compliance with Federal Information Security Modernization Act of 2014 (FISMA) requirements.