Surface Transportation Board Begins a New Audit for Cybersecurity

The U.S. Department of Transportation’s Office of Inspector General (OIG) has started an audit of the Surface Transportation Board (STB) information security program. This review is for fiscal year 2025. It is required by the Federal Information Security Modernization Act of 2014 (FISMA). FISMA ensures that federal agencies take steps to protect their data and systems.

What FISMA Does

FISMA is a law that improves cybersecurity for federal agencies. It requires agencies to have strong information security programs. Each year, these programs must be reviewed independently. The results of these reviews are sent to the Office of Management and Budget (OMB). This process helps agencies find weaknesses and fix them.

The STB asked the OIG to handle its review for 2025. This review will check how well the STB’s cybersecurity program works. It will also ensure that the STB is following federal standards.

A Closer Look at Surface Transportation Board Audit

The OIG has hired Williams Adley & Company, DC LLP, to conduct the audit. This company is an independent public accounting firm. It specializes in auditing federal programs. The OIG will oversee the company’s work.

The audit will focus on metrics chosen by the OMB. These metrics help measure how effective the STB’s cybersecurity practices are. The findings from the review will be shared with the OMB. This will be done using CyberScope, a secure online tool used by federal agencies.

How the Surface Transportation Board Audit Will Work

The audit will start right away. Williams Adley & Company will perform the review at the STB’s headquarters in Washington, D.C. Some of the work will also happen at contractor sites. The audit team will meet with the STB’s audit liaison to plan the work. This meeting will outline what will be reviewed and when.

Kevin Dorsey, Assistant Inspector General, explained the goal of the audit. He said, “The audit objective will be to determine the effectiveness of STB’s information security program and practices.” The review will focus on specific cybersecurity metrics. The results will be reported to the OMB as required by FISMA.

What Is the Surface Transportation Board and What Do They Do?

The Surface Transportation Board (STB) is an independent federal agency. It’s in charge of making sure that certain parts of the transportation system in the United States work smoothly and fairly. Their main focus is on things like railroads and how they operate.

Imagine you’re playing a board game, and one person tries to take all the pieces for themselves. That wouldn’t be fair, right? The STB aims to make sure that doesn’t happen in transportation. They create rules to ensure companies, like railroads, treat everyone fairly—whether it’s passengers, businesses shipping goods, or other companies using the tracks.

Key Jobs of the Surface Transportation Board

1. Overseeing Railroads: The STB checks how railroads operate. They make sure rail companies don’t overcharge customers or block others from using the tracks.
2. Handling Disputes: If two companies can’t agree on how to share rail lines, the STB steps in to settle the argument.
3. Reviewing Mergers: When two big railroad companies want to combine into one, the STB decides if that’s good for the transportation system or if it might hurt competition.
4. Looking Out for Fairness: The STB also checks on other transportation areas, like trucking and shipping, but mostly when they connect to railroads.

The STB’s work might not seem exciting at first, but it’s super important. Without them, things like shipping food, clothing, and electronics across the country could get really complicated. Their rules aim to keep transportation running smoothly so businesses and people can get what they need on time and at a fair price.

The Importance of Cybersecurity

FISMA is essential for protecting federal agencies from cyber threats. It helps agencies identify risks and improve their defenses. These reviews ensure that agencies like the STB are ready to handle cyber risks.

The results of this audit will show how well the STB’s cybersecurity program is performing. They will also highlight areas that need improvement. Regular audits like this are important for keeping federal systems safe.

This review will help the STB improve its cybersecurity efforts. It will also support the government’s overall mission to strengthen information security.

Updates on the audit and its findings will follow as the work continues.