United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2008-02-29 monographic deposited born digital 30 p. GA 1.13:GAO-08-280 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-08-280 P0b002ee18039bac5 f:d08280 DGPO 2010-08-12 2011-03-23 GAOREPORTS-GAO-08-280 machine generated eng fdlp REPORT GAOREPORTS-GAO-08-280 GAO-08-280 Computer systems Information security Information security management Information systems Internal controls Securities regulation Stocks (securities) System security plans System vulnerabilities Systems analysis Systems evaluation Systems management Security standards GAO High Risk Series Other Written Product A81172 In carrying out its mission to ensure that securities markets are fair, orderly, and efficiently maintained, the Securities and Exchange Commission (SEC) relies extensively on computerized systems. Integrating effective information security controls into a layered control strategy is essential to ensure that SEC's financial and sensitive information are protected from inadvertent or deliberate misuse, disclosure, or destruction. As part of its audit of SEC's fiscal year 2007 financial statements, GAO assessed (1) the status of SEC's actions to correct previously reported information security weaknesses and (2) the effectiveness of SEC's controls for ensuring the confidentiality, integrity, and availability of its information systems and information. To do this, GAO examined security plans, policies, and practices; interviewed pertinent officials; and conducted tests and observations of controls in operation. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-08-280/html/GAOREPORTS-GAO-08-280.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-08-280/pdf/GAOREPORTS-GAO-08-280.pdf GAO-08-280 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-08-280 Other Written Product GAO-08-280; Information Security: Securities and Exchange Commission Needs to Continue to Improve Its Program; Computer systems Information security Information security management Information systems Internal controls Securities regulation Stocks (securities) System security plans System vulnerabilities Systems analysis Systems evaluation Systems management Security standards GAO High Risk Series Volume 116 Page 2946 116 Stat. 2946