The Office of Inspector General (OIG) initiated this review based upon an assessment of program risks. Our objective was to review the U.S. AbilityOne Commission’s (Commission) enterprise risk management (ERM) program to assess its maturity level, which will provide the Commission with an overall understanding as to where its current ERM program stands.
There are five levels in the model we used to assess the Commission’s ERM program. The OIG assessment determined that the Commission’s ERM program maturity is between level 2, emerging, and level 3, integrated. By conducting its own internal maturity assessment, it can periodically identify gaps in its ERM program and develop plans to mature the program, as necessary.