Justice Automation:

Security Risk Analyses and Plans for Project EAGLE Not Yet Prepared

IMTEC-89-65: Published: Sep 19, 1989. Publicly Released: Sep 29, 1989.

Additional Materials:

Contact:

Office of Public Affairs
(202) 512-4800
youngc1@gao.gov

Pursuant to a congressional request, GAO reviewed the Department of Justice's Enhanced Automation for the Government Legal Environment (EAGLE) project, focusing on Justice's efforts to: (1) develop security plans and conduct risk analyses for EAGLE systems; and (2) ensure protection against unauthorized access or information disclosure.

GAO found that Justice had not developed security plans or conducted risk analyses for the systems to ensure adequate protection for sensitive information, since it believed that: (1) existing security safeguards were adequate; (2) it could make refinements after installation; and (3) it could not determine system security needs prior to contractor selection. GAO also found that: (1) the system required contingency plans for system failure and provisions for user identification and data encryption, in addition to physical controls; (2) the contract specified the types and quantities of hardware and software needed; and (3) Justice planned to revise its approach and prepare risk analyses and security plans prior to system installation and operation.

Sep 26, 2018

Sep 5, 2018

Jul 18, 2018

Jul 16, 2018

Jun 27, 2018

May 31, 2018

May 17, 2018

Apr 18, 2018

Apr 12, 2018

Looking for more? Browse all our products here