U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Evaluation of the U.S. Nuclear Regulatory Commission’s Information Technology Asset Management

Report Information

Date Issued
Report Number
OIG-24-E-01
Report Type
Inspection / Evaluation
Description
The Office of the Inspector General (OIG) determined that U.S. Nuclear Regulatory Commission (NRC) information technology (IT) assets were not managed effectively throughout aspects of the IT lifecycle management process. The OIG substantiated four allegations, and found that some NRC assets were not returned upon employee separation from the NRC. Specifically, three employees separated from the NRC without returning four laptops. Additionally, NRC IT assets are not located in the locations that are shown in the configuration management database. The OIG found that 666 of 980 items were not in the locations assigned within the ITSM toolset. Further, new IT assets were not logged into the appropriate database for a period of 3 months. The OIG also found that NRC decommissioning procedures were not followed for IT assets.This report makes six recommendations to improve the NRC’s information technology asset management program.
Joint Report
Yes
Participating OIG
Nuclear Regulatory Commission OIG
Agency Wide
Yes (agency-wide)
Questioned Costs
$0
Funds for Better Use
$37000
View report on Oversight.gov

Recommendations

Update the PC Decommissioning Standard Operating Procedure and the Hardware Asset Management Playbook to reflect all the required steps in the decommissioning and disposal process.

Agency Response NRC staff agrees with this recommendation. Dated May 29, 2025:<br />
OCIO has updated the standard operating procedure to reflect all the required steps in the decommissioning and disposal process. (Completed: Q3 FY 2024)<br />
OCIO will update the HAM Playbook to reflect the established standard operating procedure.<br />
(Completed: Q1 FY 2025)<br />
OIG Analysis: The OIG will close this recommendation after reviewing and confirming the evidence provided by NRC’s management regarding the update of the HAM Playbook. This recommendation remains open and resolved.<br />
<br />
Agency Response Dated July 31, 2024: NRC staff agrees with this recommendation. OCIO has updated the standard operating procedure to reflect all the required steps in the decommissioning and disposal process. (Completed: Q3 FY 2024) OCIO will update the HAM Playbook to reflect the established standard operating procedure. (Target Completion Date: Q1 FY 2025)<br />
OIG Analysis: The OIG will close this recommendation after reviewing and confirming the evidence provided by NRC’s management updating the HAM Playbook. This recommendation remains open and resolved.