United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2007-07-27 monographic deposited born digital 61 p. GA 1.13:GAO-07-837 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-07-837 P0b002ee18039aa32 f:d07837 DGPO 2010-08-12 2011-03-24 GAOREPORTS-GAO-07-837 machine generated eng fdlp REPORT GAOREPORTS-GAO-07-837 GAO-07-837 Access control Accountability Agency evaluation Computer security Data integrity Federal agencies Information security Internal controls Requirements definition Risk assessment Risk management Systems integrity Policies and procedures Program implementation Other Written Product A73544 For many years, GAO has reported that weaknesses in information security are a widespread problem with potentially devastating consequences--such as intrusions by malicious users, compromised networks, and the theft of personally identifiable information--and has identified information security as a governmentwide high-risk issue. Concerned by reports of significant vulnerabilities in federal computer systems, Congress passed the Federal Information Security Management Act of 2002 (FISMA), which permanently authorized and strengthened the information security program, evaluation, and reporting requirements for federal agencies. As required by FISMA to report periodically to Congress, in this report GAO discusses the adequacy and effectiveness of agencies' information security policies and practices and agencies' implementation of FISMA requirements. To address these objectives, GAO analyzed agency, inspectors general (IG), Office of Management and Budget (OMB), congressional, and GAO reports on information security. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-07-837/html/GAOREPORTS-GAO-07-837.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-07-837/pdf/GAOREPORTS-GAO-07-837.pdf GAO-07-837 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-07-837 Other Written Product GAO-07-837; Information Security: Despite Reported Progress, Federal Agencies Need to Address Persistent Weaknesses; Access control Accountability Agency evaluation Computer security Data integrity Federal agencies Information security Internal controls Requirements definition Risk assessment Risk management Systems integrity Policies and procedures Program implementation Volume 116 Page 2899 116 Stat. 2899 Public Law 107-347