United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2005-04-14 monographic deposited born digital 22 p. GA 1.13:GAO-05-567T https://www.govinfo.gov/app/details/GAOREPORTS-GAO-05-567T P0b002ee180392b17 f:d05567t DGPO 2010-08-12 2011-03-24 GAOREPORTS-GAO-05-567T machine generated eng fdlp REPORT GAOREPORTS-GAO-05-567T GAO-05-567T Computer security Electronic government Employee training Federal law Federal regulations General management reviews Information resources management Internet Performance measures Reporting requirements Standards and standardization Statutory law Security standards Testimony A21777 For many years, GAO has reported that poor information security is a widespread problem that has potentially devastating consequences. Accordingly, since 1997, GAO has identified information security as a governmentwide high-risk issue in reports to Congress--most recently in January 2005. Concerned with accounts of attacks on commercial systems via the Internet and reports of significant weaknesses in federal computer systems that made them vulnerable to attack, Congress passed the Federal Information Security Management Act of 2002 (FISMA), which permanently authorized and strengthened the federal information security program, evaluation, and reporting requirements established for federal agencies. FISMA requires that agencies report annually to OMB who issues guidance for that reporting process. The Department of Homeland Security (DHS), the third largest agency in the federal government, uses a variety of major applications and general systems in support of operational and administrative requirements. This testimony discusses DHS's progress and challenges in implementing FISMA as reported by the agency and its Inspector General (IG). https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-05-567T/html/GAOREPORTS-GAO-05-567T.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-05-567T/pdf/GAOREPORTS-GAO-05-567T.pdf GAO-05-567T https://www.govinfo.gov/app/details/GAOREPORTS-GAO-05-567T Testimony GAO-05-567T; Information Security: Department of Homeland Security Faces Challenges in Fulfilling Statutory Requirements; Computer security Electronic government Employee training Federal law Federal regulations General management reviews Information resources management Internet Performance measures Reporting requirements Standards and standardization Statutory law Security standards Public Law 107-347