Reports

The OIG investigated allegations that a Bureau of Safety and Environmental Enforcement (BSEE) manager violated Federal procurement laws and regulations by improperly influencing recommendations made by procurement source selection committees and by inflating Independent Government Cost Estimates (IGCEs).

During an investigation into suspicious internet traffic, we identified two vulnerabilities in the USGS’ IT security posture: web-site access and open USB ports. Common methods to prevent malware incidents involve a combination of employee training (Rules of Behavior) and access controls (hardware and software technologies). We made two recommendations to help the USGS improve its IT security posture.

USGS IT Security Vulnerabilities

Organization Double-Billed the BLM and Submitted Invalid Reimbursement Requests

The OIG investigated suspicious internet traffic discovered during an IT security audit of the computer network at the U.S. Geological Survey (USGS), Earth Resources Observation and Science (EROS) Center satellite imaging facility in Sioux Falls, SD. The audit found indications that a USGS employee’s computer was compromised and infected with malware. We sought to confirm how a compromise occurred. We found that the employee knowingly used U.S. Government computer systems to access unauthorized internet web pages.