United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2006-03-24 monographic deposited born digital 36 p. GA 1.13:GAO-06-392 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-06-392 P0b002ee1803a0510 f:d06392 DGPO 2010-08-12 2011-03-28 GAOREPORTS-GAO-06-392 machine generated eng fdlp REPORT GAOREPORTS-GAO-06-392 GAO-06-392 Cyber security Evaluation criteria Evaluation methods Information security Information technology Product evaluation Program evaluation Systems evaluation Information management Joint ventures Other Written Product A50017 In 1997, the National Security Agency and the National Institute of Standards and Technology formed the National Information Assurance Partnership (NIAP) to boost federal agencies' and consumers' confidence in information security products manufactured by vendors. To facilitate this goal, NIAP developed a national program that requires accredited laboratories to independently evaluate and validate the security of these products for use in national security systems. These systems are those under control of the U.S. government that contain classified information or involve intelligence activities. GAO was asked to identify (1) the governmentwide benefits and challenges of the NIAP evaluation process on national security systems, and (2) the potential benefits and challenges of expanding the requirement of NIAP to non-national security systems, including sensitive but unclassified systems. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-06-392/html/GAOREPORTS-GAO-06-392.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-06-392/pdf/GAOREPORTS-GAO-06-392.pdf GAO-06-392 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-06-392 Other Written Product GAO-06-392; Information Assurance: National Partnership Offers Benefits, but Faces Considerable Challenges; Cyber security Evaluation criteria Evaluation methods Information security Information technology Product evaluation Program evaluation Systems evaluation Information management Joint ventures Public Law 101-576