Computer Security: Weaknesses Continue to Place Critical Federal Operations and Assets at Risk

United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2001-04-05 monographic deposited born digital 22 p. GA 1.13:GAO-01-600T https://www.govinfo.gov/app/details/GAOREPORTS-GAO-01-600T P0b002ee1803a3a31 f:d01600t DGPO 2010-08-12 2011-03-28 GAOREPORTS-GAO-01-600T machine generated eng fdlp REPORT GAOREPORTS-GAO-01-600T GAO-01-600T Computer security Computer software Information resources management Information systems ILOVEYOU Computer Virus Melissa Computer Virus Testimony A00746 Computer Security: Weaknesses Continue to Place Critical Federal Operations and Assets at Risk This testimony discusses GAO's analysis of security audits at federal agencies. The widespread interconnectivity of computers poses significant risks to federal computer systems and the operations and the infrastructures they support. GAO's evaluations show that federal computer systems are riddled with weaknesses that continue to put critical operations and assets at risk. These weaknesses covered six major areas of general control (1) security program management, (2) access controls, (3) software development and change controls, (4) segregation of duties, (5) operating systems controls, and (6) service continuity. Weaknesses in these areas placed a broad range of critical operations and assets at risk for fraud, misuse, and disruption. Federal agencies have taken steps to address these problems and many have good remedial efforts underway. However, these efforts will not be fully effective and lasting unless they are supported by a strong agencywide security management framework. Establishing such as management framework requires that agencies take a comprehensive approach that involves both (1) senior agency program managers who understand which aspects of their missions are the most critical and sensitive and (2) technical experts who know the agencies' systems and can suggest appropriate technical security control techniques. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-01-600T/html/GAOREPORTS-GAO-01-600T.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-01-600T/pdf/GAOREPORTS-GAO-01-600T.pdf GAO-01-600T https://www.govinfo.gov/app/details/GAOREPORTS-GAO-01-600T Testimony GAO-01-600T; Computer Security: Weaknesses Continue to Place Critical Federal Operations and Assets at Risk; Computer security Computer software Information resources management Information systems ILOVEYOU Computer Virus Melissa Computer Virus