OIG Audit Finds Deficiencies in DOT IT Systems' Resilience

The DOT agencies have not all effectively tested their plans to ensure they will work in the event of a disruption, the audit found, with OIG reporting that the Federal Aviation Administration did not conduct annual contingency plan testing for certain high-impact systems as required.

A new audit by the U.S. Department of Transportation's Inspector General's office examined the disaster recovery plans for DOT agencies' information systems. With more than 450 information systems currently used by the department, including systems for air traffic control and communication, effective disaster recovery planning is critical to maintain the systems for these agencies during an unexpected event, according to the OIG, which found that the disaster recovery plans for the Federal Highway Administration, Federal Railroad Administration, Federal Motor Carrier Safety Administration, and Pipeline and Hazardous Materials Safety Administration were not in compliance with DOT policy.

In addition, the DOT agencies have not all effectively tested their plans to ensure they will work in the event of a disruption, the audit found, with OIG reporting that the Federal Aviation Administration did not conduct annual contingency plan testing for certain high-impact systems as required and FAA, FMCSA, PHMSA, and FRA did not conduct required functional disaster recovery testing.

The auditors made nine recommendations to improve the effectiveness of IT systems' contingency planning and testing. The department concurred with all nine of the recommendations, and the Inspector General's office reported that it considers all of them resolved but open pending completion of planned actions.

The audit found that the systems could be vulnerable to disruptions such as power outages, hardware disk drive failure, equipment destruction, or fire.

The catalyst for the audit was an FAA contract employee who deliberately set fire to critical equipment at FAA's Chicago Air Route Traffic Control Center in September 2014, which was the second time since May 2014 that a fire at a Chicago area air traffic control facility resulted in delays and cancellations of hundreds of flights in and out of O'Hare and Midway international airports.

Download Center

  • Safety Metrics Guide

    Is your company leveraging its safety data and analytics to maintain a safe workplace? With so much data available, where do you start? This downloadable guide will give you insight on helpful key performance indicators (KPIs) you should track for your safety program.

  • Job Hazard Analysis Guide

    This guide includes details on how to conduct a thorough Job Hazard Analysis, and it's based directly on an OSHA publication for conducting JHAs. Learn how to identify potential hazards associated with each task of a job and set controls to mitigate hazard risks.

  • A Guide to Practicing “New Safety”

    Learn from safety professionals from around the world as they share their perspectives on various “new views” of safety, including Safety Differently, Safety-II, No Safety, Human and Organizational Performance (HOP), Resilience Engineering, and more in this helpful guide.

  • Lone Worker Safety Guide

    As organizations digitalize and remote operations become more commonplace, the number of lone workers is on the rise. These employees are at increased risk for unaddressed workplace accidents or emergencies. This guide was created to help employers better understand common lone worker risks and solutions for lone worker risk mitigation and incident prevention.

  • EHS Software Buyer's Guide

    Learn the keys to staying organized, staying sharp, and staying one step ahead on all things safety. This buyer’s guide is designed for you to use in your search for the safety management solution that best suits your company’s needs.

  • Vector Solutions

Featured Whitepaper

OH&S Digital Edition

  • OHS Magazine Digital Edition - June 2022

    June 2022

    Featuring:

    • SAFETY CULTURE
      Corporate Safety Culture Is Workplace Culture
    • HEAT STRESS
      Keeping Workers Safe from Heat-Related Illnesses & Injuries
    • EMPLOYEE HEALTH SCREENING
      Should Employers Consider Oral Fluid Drug Testing?
    • PPE FOR WOMEN
      Addressing Physical Differences
    View This Issue