{"database": "openregs", "table": "ig_recommendations", "is_view": false, "human_description_en": "where report_id = \"2024-audit-boards-information-security-program\"", "rows": [[18, "2024-audit-boards-information-security-program", "1", "Yes", "Develop a supply chain risk management strategy that includes (a) a supply chain risk appetite and tolerance, (b) an enterprise supply chain risk management governance structure, and (c) supply chain risk assessment processes that include migration strategies or controls.", 0, 0], [19, "2024-audit-boards-information-security-program", "2", "No", "Document and implement a baseline review and escalation process for data loss prevention alerts.", 0, 0], [20, "2024-audit-boards-information-security-program", "3", "No", "Reinforce the requirements for identifying and documenting system interconnections as part of the Board\u2019s training on its cyber risk management application and require all relevant individuals to take the training.", 0, 0], [21, "2024-audit-boards-information-security-program", "4", "No", "Evaluate and implement options to enforce the agency\u2019s existing guidance related to identifying and documenting system interconnections.", 0, 0], [22, "2024-audit-boards-information-security-program", "5", "No", "Develop and implement a mobile application scanning program that includes a vulnerability scanning solution and process to identify and remediate vulnerabilities.", 0, 0], [23, "2024-audit-boards-information-security-program", "6", "No", "Ensure that the Board\u2019s Incident Notification and Breach Response Plan is reviewed, tested and approved annually.", 0, 0], [24, "2024-audit-boards-information-security-program", "8", "No", "Incorporate targeted phishing exercises into the Board\u2019s security awareness and training program and processes.", 0, 0]], "truncated": false, "filtered_table_rows_count": 7, "expanded_columns": [], "expandable_columns": [[{"column": "report_id", "other_table": "ig_reports", "other_column": "report_id"}, "title"]], "columns": ["rowid", "report_id", "rec_number", "significant", "text", "questioned_costs", "funds_for_better_use"], "primary_keys": [], "units": {}, "query": {"sql": "select rowid, report_id, rec_number, significant, text, questioned_costs, funds_for_better_use from ig_recommendations where \"report_id\" = :p0 order by rowid limit 101", "params": {"p0": "2024-audit-boards-information-security-program"}}, "facet_results": {}, "suggested_facets": [{"name": "significant", "toggle_url": "https://pawtectors.org/openregs/ig_recommendations.json?report_id=2024-audit-boards-information-security-program&_facet=significant"}], "next": null, "next_url": null, "private": false, "allow_execute_sql": true, "query_ms": 4.622547072358429, "source": "Federal Register API & Regulations.gov API", "source_url": "https://www.federalregister.gov/developers/api/v1", "license": "Public Domain (U.S. Government data)", "license_url": "https://www.regulations.gov/faq"}