FY 2012 Office of Inspector General FISMA Audit of GSA’s Information Technology Security Program, Report Number A120125/O/F/F12005
September 28, 2012. “We identified the following during our audit:

• Finding 1 – Systems faced increased threats because security patching for high-risk vulnerabilities were not performed timely.
• Finding 2 – For newly deployed systems, PBS lacks procedures to ensure that system officials will be able to recover data and restore the system in the event of a contingency.
• Finding 3 – The Office of the Chief Information Officer (OCIO) lacks comprehensive guidance for the secure development of mobile applications to mitigate mobile threats.”