United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2005-04-07 monographic deposited born digital 28 p. GA 1.13:GAO-05-483T https://www.govinfo.gov/app/details/GAOREPORTS-GAO-05-483T P0b002ee18039766e f:d05483t DGPO 2010-08-12 2011-03-23 GAOREPORTS-GAO-05-483T machine generated eng fdlp REPORT GAOREPORTS-GAO-05-483T GAO-05-483T Computer security Federal agencies Information resources management Information technology Reporting requirements Performance measures Government information Federal law Testimony A21039 For many years, GAO has reported that poor information security is a widespread problem that has potentially devastating consequences. Further, since 1997, GAO has identified information security as a governmentwide high-risk issue in reports to Congress--most recently in January 2005. Concerned with accounts of attacks on commercial systems via the Internet and reports of significant weaknesses in federal computer systems that make them vulnerable to attack, Congress passed the Federal Information Security Management Act of 2002 (FISMA), which permanently authorized and strengthened the federal information security program, evaluation, and reporting requirements established for federal agencies. This testimony discusses the federal government's progress and challenges in implementing FISMA as reported by the Office of Management and Budget (OMB), the agencies, and Inspectors General (IGs) and opportunities for improving the usefulness of the annual reporting process, including the consideration of a common framework for the annual FISMA reviews conducted by the IGs. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-05-483T/html/GAOREPORTS-GAO-05-483T.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-05-483T/pdf/GAOREPORTS-GAO-05-483T.pdf GAO-05-483T https://www.govinfo.gov/app/details/GAOREPORTS-GAO-05-483T Testimony GAO-05-483T; Information Security: Continued Efforts Needed to Sustain Progress in Implementing Statutory Requirements; Computer security Federal agencies Information resources management Information technology Reporting requirements Performance measures Government information Federal law Public Law 107-347