We performed an internal control questionnaire review for Jamestown-Yorktown Foundation and followed up on the findings from the last review as well as findings from a previous audit of information systems security. The results letter contains 7 repeat findings and 4 new findings in the areas of information system security, policies and procedures, ARMICS, oversight of third-party service providers, and accounting for leases.