Information Security: Software Change Controls at the Department of Commerce

Pursuant to a congressional request, GAO reviewed software change controls at the Department of Commerce, focusing on: (1) whether key controls as described in agency policies and procedures regarding software change authorization, testing, and approval complied with federal guidance; and (2) the extent to which agencies contracted for year 2000 remediation of mission-critical systems and involved foreign nationals in these efforts.