OMB Disputes GAO on Cyber Rating Recommendations

OMB disagrees with GAO recommendations to update inspector general reporting guidance to increase cybersecurity rating consistency and precision, the GAO said Thursday. OMB didn’t concur with the recommendation, saying the agency would like to give IGs “flexibility to adapt their reviews.” GAO believes the recommendations are warranted “to provide a more consistent and accurate picture of agencies' cybersecurity performance.” OMB countered that its guidance “establishes a foundational set of standards for IG audits while giving IGs the freedom to expand or adapt their reviews based upon their agencies’ unique missions, resources, and challenges.”