United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2005-07-15 monographic deposited born digital 54 p. GA 1.13:GAO-05-552 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-05-552 P0b002ee180392460 f:d05552 DGPO 2010-08-12 2011-05-04 GAOREPORTS-GAO-05-552 machine generated eng fdlp REPORT GAOREPORTS-GAO-05-552 GAO-05-552 Evaluation methods Information security Information security management Information security regulations Internal controls Policy evaluation Regulatory agencies Reporting requirements Risk assessment Standards Strategic information systems planning Systems evaluation Other Written Product A30140 Federal agencies rely extensively on computerized information systems and electronic data to carry out their missions. The security of these systems and data is essential to prevent data tampering, disruptions in critical operations, fraud, and inappropriate disclosure of sensitive information. Concerned with accounts of attacks on systems via the Internet and reports of significant weaknesses in federal computer systems that make them vulnerable to attack, Congress passed the Federal Information Security Management Act (FISMA) in 2002. In accordance with FISMA requirements that the Comptroller General report periodically to the Congress, GAO's objectives in this report are to evaluate (1) the adequacy and effectiveness of agencies' information security policies and practices and (2) the federal government's implementation of FISMA requirements. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-05-552/html/GAOREPORTS-GAO-05-552.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-05-552/pdf/GAOREPORTS-GAO-05-552.pdf GAO-05-552 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-05-552 Other Written Product GAO-05-552; Information Security: Weaknesses Persist at Federal Agencies Despite Progress Made in Implementing Related Statutory Requirements; Evaluation methods Information security Information security management Information security regulations Internal controls Policy evaluation Regulatory agencies Reporting requirements Risk assessment Standards Strategic information systems planning Systems evaluation Public Law 107-347