communications, and information are protected and defended against damage, unauthorized use or modification, and exploitation.” Based on that definition, and in our professional judgment, we concluded that a finding in this report falls under that definition. Consequently, for the publicly available audit report all specifics as to the nature of the cybersecurity finding and required corrective actions have been redacted. We have determined that such aforementioned practices, and government auditing standards, support the redaction of this information from the public audit report. The specifics of the cybersecurity finding have been communicated to MDTA and those parties responsible for acting on our recommendations in an unredacted audit report. The response from MDOT, on behalf of MDTA, to our findings and recommendations, is included as an appendix to this report. Depending on the version of the audit report, responses to any cybersecurity findings may be redacted in accordance with State law. As prescribed in the State Government 12 Article, Section 2-1224 of the Annotated Code of Maryland, we will advise MDOT regarding the results of our review of its response.
13
Made with FlippingBook - professional solution for displaying marketing and sales documents online