Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Beta This is a new resource

Audit of Cybersecurity Controls Over Unaccompanied Children Data

Announced on  | Last Modified on  | Project Number: A-18-22-03200
Status
Completed
Agency
Administration for Children and Families

OBJECTIVE

The Unaccompanied Children (UC) Program, operated by the Office of Refugee Resettlement (ORR) within the Administration for Children and Families (ACF), provides temporary shelter, care, and other related services to UC in its custody. ORR uses the Unaccompanied Children Portal (UC Portal) and other data sources to maintain information on over 100,000 UC. We will determine whether ACF has sufficiently addressed findings identified during a previous UC Portal audit, implemented controls to ensure the cybersecurity of sensitive UC data in accordance with Federal requirements, and incorporated adequate system development life-cycle planning to ensure that the UC Portal aligns with business and performance objectives.

TIMELINE

REPORT PUBLISHED

ACF Has Enhanced Some Cybersecurity Controls Over the Unaccompanied Children Portal and Data But Improvements Are Needed (A-18-22-03200)

24-A-18-058.01 to ACF - Open Unimplemented
Update expected on 12/27/2025
We recommend that the Administration for Children and Families consistently perform user account reviews in accordance with its access control policy.

24-A-18-058.02 to ACF - Open Unimplemented
Update expected on 12/27/2025
We recommend that the Administration for Children and Families fully implement the 30 required minimum controls identified in the UC Portal system security plan as being in various stages of implementation.

View in Recommendation Tracker
Work Plan Type
Office of Audit Services
HHS Agencies
Administration for Children and Families
Issue Areas
Information Technology and Cybersecurity
Target Groups
Children and Families
Financial Groups
Other Funding