United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2001-08-24 monographic deposited born digital 31 p. GA 1.13:GAO-01-806 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-01-806 P0b002ee180393dd3 f:d01806 DGPO 2010-08-12 2011-03-28 GAOREPORTS-GAO-01-806 machine generated eng fdlp REPORT GAOREPORTS-GAO-01-806 GAO-01-806 Classified information Computer security Facility security Information leaking Laboratories DOE Classified Matter Protection and Control Manual Other Written Product A01409 The Department of Energy (DOE) maintains millions of classified documents containing highly sensitive nuclear weapons design and production information. Allegations that the Peoples Republic of China obtained nuclear warhead designs from an employee of DOE's Los Alamos National Laboratory, as well as the disappearance of two computer hard drives containing highly sensitive weapons information from that same laboratory, have raised concerns about how effectively DOE protects classified information, particularly the most sensitive classified information that is contained in vaults and computer systems. DOE's security program consists of numerous strategies for protecting and controlling classified information, such as controlling access to classified information through physical and administrative barriers and determining whether a person's work requires a "need to know" the information. DOE has recently increased protection for top-secret documents by revising its Classified Matter Protection and Control Manual, which provides detailed requirements for the protection and control of classified matter. This report reviews the (1) extent to which DOE's Sandia and Los Alamos National Laboratories have implemented DOE's established access controls and need-to-know requirements for classified vaults and computer systems containing the most sensitive classified information as well as the adequacy of these requirements and (2) steps DOE is taking to upgrade protection of its classified information. GAO found that (1) the Los Alamos and Sandia National Laboratories have implemented DOE's access controls and need-to-know requirements for both vaults and classified computer systems containing the most sensitive classified information, but DOE's requirements for documenting need to know lack specificity, allowing laboratory managers wide variation in interpretation and implementation and (2) DOE has recently taken, and continues to take, steps to upgrade protection and control over its classified information, but additional steps are needed. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-01-806/html/GAOREPORTS-GAO-01-806.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-01-806/pdf/GAOREPORTS-GAO-01-806.pdf GAO-01-806 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-01-806 Other Written Product GAO-01-806; Nuclear Security: DOE Needs to Improve Control Over Classified Information; Classified information Computer security Facility security Information leaking Laboratories DOE Classified Matter Protection and Control Manual