Challenge: Unsecured Information and Infrastructure
Computerized information and communications systems support federal agencies and the nation’s critical
infrastructures—such as energy, transportation systems, communications, and financial services. These vital
systems are under assault from an array of evolving and sophisticated threats from hackers (foreign and domestic)
and insiders alike. Protecting these IT systems and the data within them is a continuing concern.
These systems are often riddled with cybersecurity control weaknesses that increase the risk of compromise.
Federal agency reports of information security incidents skyrocketed over the past decade. These incidents:
- jeopardize the privacy of personally identifiable information of millions of individuals;
- expose sensitive information to unauthorized use, disclosure, alteration, and loss; and
- disrupt agency operations.
Cybersecurity and privacy safeguards remain paramount as federal agencies and privately-owned critical
infrastructures become ever more dependent on interconnected computer systems to communicate, deliver services,
and conduct operations.