Assessment of Management Controls to Implement the FISC Order Authorizing NSA to Collect Information Using Pen Register and Trap and Trace Devices

This document is a report assessing the NSA's compliance with a FISC order regarding Trap and Trace devices. The report found that the existing controls are adequate, although additional controls are needed for processing and monitoring queries made against PRTT data, documenting oversight activities, and providing an annual refresher training on the order.