United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2004-03-16 monographic deposited born digital 45 p. GA 1.13:GAO-04-483T https://www.govinfo.gov/app/details/GAOREPORTS-GAO-04-483T P0b002ee1803a37d1 f:d04483t DGPO 2010-08-12 2011-03-28 GAOREPORTS-GAO-04-483T machine generated eng fdlp REPORT GAOREPORTS-GAO-04-483T GAO-04-483T Accountability Computer security Information resources management Information systems Information technology Performance measures Reporting requirements Standards and standardization Risk assessments Testimony A09501 For many years, GAO has reported on the widespread negative impact of poor information security within federal agencies and has identified it as a governmentwide high-risk issue since 1997. Legislation designed to improve information security was enacted in October 2000. It was strengthened in December 2002 by new legislation, the Federal Information Security Management Act of 2002 (FISMA), which incorporated important new requirements. This testimony discusses (1) the Office of Management and Budget's (OMB) recent report to the Congress required by FISMA on the government's overall information security posture, (2) the reported status of efforts by 24 of the largest agencies to implement federal information security requirements, (3) opportunities for improving the usefulness of performance measurement data, and (4) progress by the National Institute of Standards and Technology (NIST) to develop related standards and guidance. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-04-483T/html/GAOREPORTS-GAO-04-483T.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-04-483T/pdf/GAOREPORTS-GAO-04-483T.pdf GAO-04-483T https://www.govinfo.gov/app/details/GAOREPORTS-GAO-04-483T Testimony GAO-04-483T; Information Security: Continued Efforts Needed to Sustain Progress in Implementing Statutory Requirements; Accountability Computer security Information resources management Information systems Information technology Performance measures Reporting requirements Standards and standardization Risk assessments Public Law 106-398 Public Law 107-347