The IT system that holds federal employee health insurance claims records is not meeting various security monitoring requirements, a report has found.

The agency needs to get better at developing a plan, and getting buy-in on that plan, before executing, the inspector general says.

A recent report recommends that the bureau increase controls to ensure that users are who they say they are.

"[IT] is a long-standing, serious, and ubiquitous challenge for federal agencies," the report states.

The IG said it would launch a comprehensive audit of the agency’s IT management, claiming FEMA's CIO misled them on the progress of open recommendations.

A new IG's evaluation has some suggestions for how the agency should prepare for its next e-discovery contract.