Audit Reports

Objective

Our objective was to determine whether the U.S. Postal Service established and implemented effective physical and environmental security controls according to Postal Service policy at the [Redacted] Processing and Distribution Center (P&DC).

The Postal Service has the mail processing resources, information technology (IT) network, and transportation infrastructure to deliver mail to every residential and business address in the country. These resources include facilities, equipment, and systems used to process, transfer, and store data, which are vital for business operations. The Postal Service implements physical and environmental security controls over systems to reduce the risk of system and equipment failure, damage from environmental hazards, and unauthorized access to its facilities and assets.

What the OIG Recommended

We recommended management:

• Review server room access control lists semiannually; and finalize, publish, and implement out-processing procedures, to include disabling badges for separating employees.
• Replace the lock on the server room entrance door and ensure it functions properly and remove all posted critical systems information from the server room.
• Ensure entrance gates are monitored and have traffic arms, computerized card access systems, and intercoms installed at entrance gates.
• Verify all dock and entrance doors are locked when not in use, entrance door locks are replaced, and employees wear and display Postal Service identification badges at all times.
• Complete the capital project to replace non-operational CCTV cameras and those that display unrecognizable images and install CCTV cameras in the retail area in accordance with Postal Service policy.