U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Oversight of the Infrastructure Support Services Contract

The Office of Inspector General (OIG) of the Federal Deposit Insurance Corporation (FDIC) issued its report on the audit of the Oversight of the Infrastructure Support Services Contract. 

In January 2021, the FDIC awarded a $300 million Basic Ordering Agreement to provide day-to-day information technology operational support for its infrastructure facilities, hardware, software, and systems. The services provided under the agreement are a critical component of the FDIC’s capability to sustain normal operations and respond to bank failures in a timely and effective manner. 

The objective of our audit was to determine whether the FDIC provided effective oversight of the Infrastructure Support Services (ISS) contract to ensure compliance with service level metrics, invoice review and approval procedures, and data protection and security controls. 

While the FDIC made significant progress to address the weaknesses identified during our audit, we determined the FDIC did not provide effective oversight to ensure key contract personnel and the Contractor complied with internal policies and procedures or the ISS contract terms and conditions. Specifically, we found that the FDIC did not always: 

  • Monitor contractor performance against agreed upon metrics nor enforce the requirement for the Contractor to provide the supporting data needed to verify compliance with service level metrics and to determine the accuracy of the service level credits due to the FDIC.
  • Review and verify the accuracy of invoice charges and service level credits for Critical Service Level defaults nor consistently retain supporting data for invoices.
  • Verify that all contractors completed training prior to being granted privileged access to the FDIC’s network and systems and ensure the Contractor reported a data leakage incident in accordance with internal policy. 

We made eight recommendations intended to improve the FDIC’s oversight of ISS contracts. The FDIC concurred with the eight recommendations and plans to complete all corrective actions by December 31, 2026. 

View the Full Report