United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2008-06-27 monographic deposited born digital 74 p. GA 1.13:GAO-08-525 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-08-525 P0b002ee1803925a1 f:d08525 DGPO 2010-08-12 2011-03-24 GAOREPORTS-GAO-08-525 machine generated eng fdlp REPORT GAOREPORTS-GAO-08-525 GAO-08-525 Access control Authentication Classified defense information Computer networks Computer security Confidential communication Data encryption Data encryption standard Data storage Data transmission Electronic data interchange Government information dissemination Information access Information disclosure Information infrastructure Information management Information security Information security management Information security regulations Information storage and retrieval Information technology Internal controls Laptops Policy evaluation Proprietary data Regulatory agencies Reporting requirements Security policies Security regulations Software Standards evaluation Wireless networks Policies and procedures Other Written Product A82599 Many federal operations are supported by automated systems that may contain sensitive information such as national security information that, if lost or stolen, could be disclosed for improper purposes. Compromises of sensitive information at numerous federal agencies have raised concerns about the extent to which such information is vulnerable. The use of technological controls such as encryption--the process of changing plaintext into ciphertext--can help guard against the unauthorized disclosure of sensitive information. GAO was asked to determine (1) how commercially available encryption technologies can help agencies protect sensitive information and reduce risks; (2) the federal laws, policies, and guidance for using encryption technologies; and (3) the extent to which agencies have implemented, or plan to implement, encryption technologies. To address these objectives, GAO identified and evaluated commercially available encryption technologies, reviewed relevant laws and guidance, and surveyed 24 major federal agencies. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-08-525/html/GAOREPORTS-GAO-08-525.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-08-525/pdf/GAOREPORTS-GAO-08-525.pdf GAO-08-525 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-08-525 Other Written Product GAO-08-525; Information Security: Federal Agency Efforts to Encrypt Sensitive Information Are Under Way, but Work Remains; Access control Authentication Classified defense information Computer networks Computer security Confidential communication Data encryption Data encryption standard Data storage Data transmission Electronic data interchange Government information dissemination Information access Information disclosure Information infrastructure Information management Information security Information security management Information security regulations Information storage and retrieval Information technology Internal controls Laptops Policy evaluation Proprietary data Regulatory agencies Reporting requirements Security policies Security regulations Software Standards evaluation Wireless networks Policies and procedures Public Law 104-191 Public Law 107-347 Public Law 109-461