Data integrity (41 - 50 of 54 items)
DOD Information Security: Serious Weaknesses Continue to Place Defense Operations at Risk
AIMD-99-107: Published: Aug 26, 1999. Publicly Released: Aug 26, 1999.
GAO updated its previous report on the security of the Department of Defense's (DOD) information systems, focusing on DOD's efforts to: (1) address specific weaknesses identified in GAO's 1996 reports; and (2) develop a comprehensive departmentwide information security program.GAO noted that: (1) serious weaknesses in DOD information security continue to provide both hackers and hundreds of thousa...
Information Security: Answers to Posthearing Questions
AIMD-99-272R: Published: Aug 9, 1999. Publicly Released: Aug 9, 1999.
Pursuant to a congressional request, GAO responded to congressional questions regarding its June 24, 1999, testimony on the need for stronger information security management, focusing on: (1) the effectiveness of federal agencies' implementation of the 1987 Computer Security Act; (2) what gaps the Presidential Decision Directive (PDD) No. 63 will fill within existing federal programs that would im...
Information Security Risk Assessment: Practices of Leading Organizations (Exposure Draft)
AIMD-99-139: Published: Aug 1, 1999. Publicly Released: Aug 1, 1999.
GAO published a guide to aid federal managers in implementing an ongoing information security risk assessment process. GAO provided case studies of practical risk assessment procedures that have been successfully adopted by four organizations known for their efforts to implement good risk assessment practices...
Information Security: Recent Attacks on Federal Web Sites Underscore Need for Stronger Information Security Management
T-AIMD-99-223: Published: Jun 24, 1999. Publicly Released: Jun 24, 1999.
Pursuant to a congressional request, GAO discussed the recent break-ins of federal web sites.GAO noted that: (1) the recent series of attacks on federal web sites have primarily focused on defacing, or vandalizing web site content or initiating denial of service attacks in order to crash servers; (2) fortunately, the consequences of recent attacks on federal web sites have been largely confined to...
Information Security: Subcommittee Questions Concerning the Melissa Computer Virus
AIMD-99-220R: Published: Jun 18, 1999. Publicly Released: Jun 18, 1999.
Pursuant to a congressional request, GAO responded to congressional questions concerning its April 1999 Testimony on the Melissa computer virus and its broader implications, focusing on: (1) how much damage was done by the virus and how many federal agencies were affected; (2) whether there are any safeguards that can detect a computer virus before it has been identified as a virus; and (3) whethe...
Information Security: The Melissa Computer Virus Demonstrates Urgent Need for Stronger Protection Over Systems and Sensitive Data
T-AIMD-99-146: Published: Apr 15, 1999. Publicly Released: Apr 15, 1999.
Pursuant to a congressional request, GAO discussed: (1) the immediate effects of the Melissa virus and variations of it as well as its broader implications for the federal government; and (2) critical measures that should be taken to ensure that federal departments and agencies are better prepared for future viruses and other forms of attack.GAO noted that: (1) Melissa is a macro virus that can af...
IRS Systems Security: Although Significant Improvements Made, Tax Processing Operations and Data Still at Serious Risk
AIMD-99-38: Published: Dec 14, 1998. Publicly Released: Jan 13, 1999.
Pursuant to a congressional request, GAO reviewed the Internal Revenue Service's (IRS) progress in correcting serious computer security weaknesses at five IRS facilities, focusing on: (1) additional security weaknesses identified at the five facilities and at an IRS facility not included in GAO's previous report; and (2) steps IRS has taken or plans to take to implement a service-wide computer sec...
Information Security: Serious Weaknesses Place Critical Federal Operations and Assets at Risk
AIMD-98-92: Published: Sep 23, 1998. Publicly Released: Sep 23, 1998.
Pursuant to a congressional request, GAO reviewed: (1) the effectiveness of federal information security practices based on recently issued audit reports; (2) efforts to centrally oversee and manage federal information security; and (3) actions taken by the Office of Management and Budget (OMB) and the federal Chief Information Officers (CIO) Council to address federal information security problem...
Information Security: Strengthened Management Needed to Protect Critical Federal Operations and Assets
T-AIMD-98-312: Published: Sep 23, 1998. Publicly Released: Sep 23, 1998.
GAO discussed the state of information security in the federal government, focusing on the Department of Veterans Affairs' (VA) and the Social Security Administration's (SSA) efforts to develop and maintain an effective security management program.GAO noted that: (1) as the importance of computer security has increased, so have the rigor and frequency of federal audits in this area; (2) during the...
Responses to Questions on FAA's Computer Security and Year 2000 Program
AIMD-98-301R: Published: Sep 14, 1998. Publicly Released: Sep 14, 1998.
Pursuant to a congressional request, GAO provided responses to questions following its August 6, 1998, testimony on the Federal Aviation Administration's (FAA) management of technology issues, focusing on: (1) why risk assessments are essential in the design of the new air traffic control (ATC) systems; (2) what role should the National Airspace System (NAS) Infrastructure Management System play i...