Report Information
Recommendations
Recommendation 1a
We recommend the Architect of the Capitol perform an independent risk assessment to identify
and evaluate potential risks within the agency’s supply chain, including risks related to cybersecurity, geopolitical factors, vendor…
Recommendation 2
We recommend that the agency work with the offices and jurisdictions to define, document, and
implement risk management processes for offices and jurisdictions to consistently identify, track,
and manage risks applicable to them.
Recommendation 3
We recommend that the agency work with the offices and jurisdictions to develop and document
risk tolerance thresholds for strategic objectives.