Inspector General infosec audits etc. 1996-2016.5 (National Science Foundation, Office of Inspector General)

Emma Best filed this request with the National Science Foundation, Office of Inspector General of the United States of America.
Tracking #

19-016

Multi Request Inspector General infosec audits etc. 1996-2016.5
Est. Completion None
Status
Fix Required

Communications

From: Emma Best


To Whom It May Concern:

Pursuant to the Freedom of Information Act, I hereby request the following records:

Copies of records mentioning or describing audits, reviews, investigations or reports regarding the agency's cyber security, including audits or investigations regarding the state of the agency's cyber security regarding potential attacks as well as audits and investigations conducted in the wake of a suspected or actual cyber attack, hacking incident or breach. Please include materials generated between 1 January 1996 and 30 June 2016.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 20 business days, as the statute requires.

Sincerely,

Emma Best

From: National Science Foundation, Office of Inspector General

Ms. Best,

Your FOIA request has been assigned #F-19-016. Before I can begin to conduct a search for responsive records, it may be necessary to agree on the scope of your request. Once we agree on the scope, I can estimate fees and processing times.

In your own words, you seek the following:

Copies of records mentioning or describing audits, reviews, investigations or reports regarding the agency's cyber security, including audits or investigations regarding the state of the agency's cyber security regarding potential attacks as well as audits and investigations conducted in the wake of a suspected or actual cyber attack, hacking incident or breach. Please include materials generated between 1 January 1996 and 30 June 2016.

(Emphasis added). As you surely know, the word "records" has a potentially broad meaning under the Federal Records Act. Virtually every email and piece of paper in a federal agency could be a "record." A search of every record, in the broadest sense, from Jan. 1, 1996 to June 30, 2016 would be extensive indeed. Also, many of the older records would now be stored off-site at a federal records facility. This fact would add significant cost to the search, although exact estimates are not possible at this time.

If I might make a suggestion, the NSF OIG web page can be found here<https://www.nsf.gov/oig/>. You may find it worth your time to explore what we already have posted. Our online audit reports go back as far as 2002. Our investigations close-out memos go as far back as 1989. I am confident that you can find much of what you seek by perusing what we have already made publicly available.

Meanwhile, I will consider the FOIA processing times tolled until you have responded and we have perfected your request with a mutual understanding of the scope.

Kind regards,
Elizabeth Sweetland
National Science Foundation Office of Inspector General
Assistant Counsel to the Inspector General

From: National Science Foundation, Office of Inspector General

Ms. Best,

Kindly review the enclosed response to your request.

Respectfully,

Elizabeth Sweetland
National Science Foundation Office of Inspector General
Assistant Counsel to the Inspector General
elisweet@nsf.gov<mailto:elisweet@nsf.gov>
(703) 292-2087(office)
(703) 887-7862 (cell)

Files

pages

Close