United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2007-06-07 monographic deposited born digital 33 p. GA 1.13:GAO-07-935T https://www.govinfo.gov/app/details/GAOREPORTS-GAO-07-935T P0b002ee18038793f f:d07935t DGPO 2010-08-12 2011-03-28 GAOREPORTS-GAO-07-935T machine generated eng fdlp REPORT GAOREPORTS-GAO-07-935T GAO-07-935T Access control Computer security Data encryption Data integrity Federal agencies Information security Internal controls Program evaluation Reporting requirements Risk assessment Risk management Program implementation GAO High Risk Series Testimony A70425 For many years, GAO has reported that weaknesses in information security are a widespread problem with potentially devastating consequences--such as intrusions by malicious users, compromised networks, and the theft of personally identifiable information--and has identified information security as a governmentwide high-risk issue. Concerned by reports of significant vulnerabilities in federal computer systems, Congress passed the Federal Information Security Management Act of 2002 (FISMA), which permanently authorized and strengthened the information security program, evaluation, and reporting requirements for federal agencies. In this testimony, GAO discusses security incidents reported at federal agencies, the continued weaknesses in information security controls at major federal agencies, agencies' progress in performing key control activities, and opportunities to enhance FISMA reporting and independent evaluations. To address these objectives, GAO analyzed agency, inspectors general (IG), and GAO issued and draft reports on information security. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-07-935T/html/GAOREPORTS-GAO-07-935T.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-07-935T/pdf/GAOREPORTS-GAO-07-935T.pdf GAO-07-935T https://www.govinfo.gov/app/details/GAOREPORTS-GAO-07-935T Testimony GAO-07-935T; Information Security: Agencies Report Progress, but Sensitive Data Remain at Risk; Access control Computer security Data encryption Data integrity Federal agencies Information security Internal controls Program evaluation Reporting requirements Risk assessment Risk management Program implementation GAO High Risk Series Volume 116 Page 2899 116 Stat. 2899 Public Law 107-347