Menu Search Account

LegiStorm

Get LegiStorm App Visit Product Demo Website
» Get LegiStorm App
» Get LegiStorm Pro Free Demo

Federal Information Security: Agencies and OMB Need to Strengthen Policies and Practices

  Premium   Download PDF Now (80 pages)
Report Type Reports and Testimonies
Report Date July 26, 2019
Release Date July 26, 2019
Report No. GAO-19-545
Summary:

A 2014 law requires federal agencies to have information security programs. The Office of Management and Budget oversees these efforts. We looked at how agencies and OMB have implemented the law and found:

Of our sample of 16 agencies, most had weaknesses in most security control areas

Inspectors General reported ineffective programs at 18 of 24 major agencies

OMB coordinated cybersecurity review meetings with 3 agencies in fiscal year 2018, compared to 24 in 2016

Our recommendations to OMB include holding those meetings at more agencies that need them. Federal information security has been a topic on our High Risk List since 1997.

 

Photograph of hands typing on a laptop.

« Return to search Government Accountability Office reports