United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office Accounting and Information Management Division author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 1999-10-04 monographic deposited born digital 33 p. GA 1.13:AIMD-00-5 https://www.govinfo.gov/app/details/GAOREPORTS-AIMD-00-5 P0b002ee18038ac21 f:ai00005 DGPO 2010-08-12 2011-03-23 GAOREPORTS-AIMD-00-5 machine generated eng fdlp REPORT GAOREPORTS-AIMD-00-5 AIMD-00-5 Computer security Financial statement audits Financial management systems Information resources management Internal controls Federal agency accounting systems Confidential communication VA Integrated Funds Distribution, Control Point Activity, Accounting & Procurement System VA Awards Data Entry System Letter Report AIMD I00005

Pursuant to a legislative requirement, GAO reported on the status of computer security throughout the Department of Veterans Affairs (VA).<p/>GAO noted that: (1) in September 1998, GAO reported that VA's information system controls placed critical department operations, such as financial management, health care delivery, benefit payments, and other operations, at risk of misuse and disruption; (2) since then, VA organizations have taken actions to correct some of the weaknesses GAO reported and independently initiated actions to improve certain aspects of their computer security management programs; (3) progress in correcting the weaknesses GAO identified in its September 1998 report has been inconsistent across VA organizations, and efforts to improve local computer security management programs were not part of a coordinated, departmentwide effort; (4) in connection with VA's fiscal year 1998 consolidated financial statement audit, GAO and VA's Office of Inspector General continued to find serious problems related to the department's control and oversight of access to its information systems; (5) these weaknesses placed sensitive information, including financial data and sensitive veteran medical and benefit information at increased risk of inadvertent or deliberate misuse, fraudulent use, improper disclosure, or destruction, possibly occurring without detection; (6) VA has recognized the significance of these problems and reported information system security as a material weakness in its Federal Managers' Financial Integrity Act report for 1998; (7) in September 1998, GAO also reported that the primary reason for VA's continuing information system control problems was that the department did not have a comprehensive computer security planning and management program; (8) to strengthen its departmentwide computer security management program, VA established a centrally managed security group in February 1999 and an Information Security Working Group, which includes representatives from the central security group and all VA line and staff organization security groups, in March 1999; (9) the Information Security Working Group developed a departmentwide plan to improve information system security throughout VA and establish a departmentwide computer security planning and management program; (10) because this multi-year plan is at an early stage of development, its ultimate effectiveness cannot yet be assessed; and (11) VA's success in improving information security is largely dependent on the level of commitment to this throughout VA and adequate resources being effectively dedicated to implement its departmentwide plan. https://www.govinfo.gov/content/pkg/GAOREPORTS-AIMD-00-5/html/GAOREPORTS-AIMD-00-5.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-AIMD-00-5/pdf/GAOREPORTS-AIMD-00-5.pdf GAO/AIMD-00-5 https://www.govinfo.gov/app/details/GAOREPORTS-AIMD-00-5 Letter Report GAO/AIMD-00-5; Information Systems: The Status of Computer Security at; Computer security Financial statement audits Financial management systems Information resources management Internal controls Federal agency accounting systems Confidential communication VA Integrated Funds Distribution, Control Point Activity, Accounting & Procurement System VA Awards Data Entry System Title 31 Section 720 31 U.S.C. 720 Volume 110 Page 684 110 Stat. 684 Public Law 104-106