Evaluation of Architect of the Capitol's Supply Chain Risk Management

Date Issued:
Report Number:
2024-0003-IE-P
Report Type:
Inspection / Evaluation
Questioned Costs:
$0
Funds for Better Use:
$0
Download Report ›› (PDF, 1.32 MB)
Number of Open Recommendations:
3

Recommendations

Recommendation Number:
1
Recommendation Body

Recommendation 1a
We recommend the Architect of the Capitol perform an independent risk assessment to identify
and evaluate potential risks within the agency’s supply chain, including risks related to cybersecurity, geopolitical factors, vendor reliability, and compliance with regulatory requirements. This assessment will allow the agency to determine whether a formal Supply Chain Risk Management program is necessary based on the agency’s unique risk profile.


Recommendation 1b
If deemed necessary based on the outcomes of the assessment performed, develop and
implement a Supply Chain Risk Management program tailored to the identified risks. This may
include implementing or enhancing appropriate controls, vendor risk management processes,
continuous monitoring, and integration of risk considerations into procurement and operation
decision-making.

Status
Open
Recommendation Number:
2
Recommendation Body

We recommend that the agency work with the offices and jurisdictions to define, document, and
implement risk management processes for offices and jurisdictions to consistently identify, track,
and manage risks applicable to them.

Status
Open
Recommendation Number:
3
Recommendation Body

We recommend that the agency work with the offices and jurisdictions to develop and document
risk tolerance thresholds for strategic objectives.

Status
Open