GAO finds most federal computer systems in danger

The Government Accountability Office has taken another look at the security of federal computer systems, and once again found that the networks are highly vulnerable.

In short, the GAO said a continued lack of information security controls and policies at almost all 24 major federal agencies puts sensitive data at risk.

The GAO said problems exist in the access controls and configuration management controls they use to protect data. Moreover, the GAO found fault with continuity of operations planning and agency-wide information security programs.

To top it all off, the GAO said that the Federal Information Security Management Act (FISMA) requires mounds of paperwork, but is failing to produce the kind of information necessary to actually tell whether computer networks are safe. Congress is currently considering legislation to reform and strengthen FISMA.

For more on the GAO report:
- see this Federal Computer Week article