United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2003-10-17 monographic deposited born digital 3 p. GA 1.13:GAO-04-173R https://www.govinfo.gov/app/details/GAOREPORTS-GAO-04-173R P0b002ee1803a0d69 f:d04173r DGPO 2010-08-12 2011-03-28 GAOREPORTS-GAO-04-173R machine generated eng fdlp REPORT GAOREPORTS-GAO-04-173R GAO-04-173R Computer crimes Computer security Computer software Computer software verification and validation Correspondence A08758 Pursuant to a request from the Chairman, Subcommittee on Technology, Information Policy, Intergovernmental Relations, and the Census, House Committee on Government Reform, GAO responded to posthearing questions. At the subject hearing, GAO discussed effective patch management practices for mitigating the risks to critical information systems posed by exploits of vulnerabilities in widely used commercial software products. GAO specifically discussed the Department of Homeland Security's (DHS) Patch Authentication and Dissemination Capability (PADC). PADC is a service offered by DHS's Federal Computer Incident Response Center (FedCIRC) that provides federal agencies with information on trusted, authenticated patches for their specific technologies without charge. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-04-173R/html/GAOREPORTS-GAO-04-173R.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-04-173R/pdf/GAOREPORTS-GAO-04-173R.pdf GAO-04-173R https://www.govinfo.gov/app/details/GAOREPORTS-GAO-04-173R Correspondence GAO-04-173R; Posthearing Questions from the September 10, 2003, Hearing on Worm and Virus Defense: How Can We Protect Our Nation's Computers From These Serious Threats?; Computer crimes Computer security Computer software Computer software verification and validation