We assessed DOI’s Interior Business Center’s (IBC’s) internal controls over its external customers’ submissions of FY 2017 second quarter financial and award data under the Digital Accountability and Transparency Act of 2014 (DATA Act). Our review focused on procedures performed and is not intended to express an opinion about the IBC’s internal controls, which comprised control environment, risk assessment, control activities, information and communication efforts, and monitoring activities.
The DATA Act requires a series of oversight reports by agency Office of Inspectors General (OIGs), including an assessment of the internal controls over the DATA Act submissions, and completeness, timeliness, quality, and accuracy of data submitted. The first OIG audit reports are required in November 2017, on agency Fiscal Year (FY) 2017 second quarter DATA Act submissions. We were able to review IBC’s internal controls in place over the data management and processes used to report financial and award data to USASpending.gov. We chose to review these specific internal controls and issue this report so OIGs for external customers have enough time prior to the November 2017 reporting deadline to use the results to determine the nature, extent, and timing of their audit procedures and perform those procedures.
We were unable to review the IBC’s internal controls over Oracle Federal Financials (OFF) for FY 2017 because that review depends on the IBC’s Service Organization Controls report over OFF, not expected to be released until September 2017.