Cybersecurity: Actions Needed to Address Challenges Facing Federal Systems

Because of the risk posed by certain cyberthreats, it is crucial that the federal government take appropriate steps to secure its information and information systems. However, the Government Accountability Office has identified a number of challenges facing the government’s approach to cybersecurity, including the following:

• Implementing risk-based cybersecurity programs at federal agencies
• Securing building and access control systems
• Overseeing contractors
• Improving incident response
• Responding to breaches of personally identifiable information
• Implementing security programs at small agencies

Until agencies take actions to address these challenges -- including the hundreds of recommendations made by GAO and inspectors general -- their systems and information will be at increased risk of compromise from cyber-based attacks and other threats.