# Peace Corps OIG Flags Cybersecurity Weaknesses

The Peace Corps Office of Inspector General reported that the agency’s FY2026 information security program remained ineffective, with weaknesses in nine of 10 FISMA domains and an overall Level 2 maturity rating. Six prior recommendations remain open, and the OIG issued eight new recommendations. The report identifies potential areas of future cybersecurity support, including IT controls, vulnerability remediation, breach response, and security training, but cites no active solicitation or contract award.

- Procurement teams can use the findings to inform cybersecurity risk assessments and market research around the identified capability areas; the report does not establish a funded requirement or procurement timeline.
- Contractors with relevant capabilities can map their offerings to IT controls, vulnerability remediation, breach response, and security training needs, while treating any future demand as potential rather than a current opportunity.
- The six open and eight new recommendations provide context for agency remediation planning, but the signal does not specify implementation deadlines or solicitation details.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** November 12, 2026

### Government Entities
- Peace Corps
- Peace Corps Office of Inspector General (Peace Corps OIG)
- Office of Management and Budget (OMB)

### Sources
- [Peace Corps IG Finds Cyber Weaknesses in 9 of 10 Security Domains – MeriTalk](https://www.meritalk.com/articles/peace-corps-ig-finds-cyber-weaknesses-in-9-of-10-security-domains) - MeriTalk