GAO-09-158CG

Upcoming Transiti

Includes Key 

Information Techno

Challenges

Gene L. Dodaro

INPUT Fed Focus 2009

October 21, 2008
GAO-09-158CG 

Outline

• Dynamics shaping the environm• GAO efforts to assist upcoming 

transition

• Examples of key information 

technology challenges
GAO-09-158CG 

No Ordinary Transiti

Dynamics Shaping our Env

• A nation at war and facing first 

security change

• Near-term and long-term econo

challenges

• Financial Turmoil• Economic Slowdown• Long-term fiscal imbalance as bac

• Personnel and Performance Ch
GAO-09-158CG 

Near Term: 

GAO Role in Financial R

• Oversight roles included in Econo

Stabilization Act

• Auditors of FDIC, FHFA and 

governmentwide statements

• Advice and analysis in reassessi

regulatory structure
GAO-09-158CG 

Long Term: 

GAO Simulations on Federal F

• Short term issues require respon• Long term unsustainable path wi

need attention

• Need to reexamine base, reform 

entitlements and review revenue 
GAO-09-158CG 

Transition:

GAO Objectives

• Provide insight into pressing national i• Highlight the growing need for innovat

integrated approaches to solve nationachallenges

• Document targeted opportunities to co

resources that can be applied to new i

• Underscore critical capacity-building n

individual agencies that will affect implof whatever new priorities are pursued

• Help inform the management improve

agendas of Congress and the new adm

• Update High Risk list
GAO-09-158CG 

Work with the Private Sect

Other Levels of Government t

Critical Cyber Infrastruct

• Bolster cyber analysis and warning ca• Reduce organizational inefficiencies• Complete actions identified during cyb• Develop sector-specific plans that fully 

of the cyber-related criteria

• Improve cybersecurity of infrastructure 

systems

• Strengthen DHS’s ability to help recov

Internet disruptions 
GAO-09-158CG 

Strengthen Information Se

Controls

• Implement controls that prevent, limit, or de

computer resources 

• Manage the configuration of network device

unauthorized access and ensure system int

• Create and maintain inventories of major sy

implement common security configurationsreceive information security training, test ancontrols, take remedial actions for known deand certify and accredit systems for operati

• Implement controls that reduce the chance 

involving data loss or theft, computer intrusprivacy breaches 
GAO-09-158CG 

Federal Information Se

Continues to be We

06

121824

Number of agencies

Access 

control

Configuration 

management

Segregation 

of duties

Servic

continu

Source: GAO analysis of agency, IG, and GAO reports for FY2007.
GAO-09-158CG 

Better Manage IT to Ac

Benefits and Control C

• Improve the planning, manageme

oversight of IT investments 

• Institute key management controls 

disciplined investment and acquismanagement processes) to effectidesign, develop, acquire, and impinvestments

• Hold executives accountable for e

program commitments and expectmet
GAO-09-158CG 

Develop and Implement Wel

Modernization Bluepri

• To advance the state of enterprise 

architecture development and use federal government, 

• senior leadership in the departments an

need to demonstrate their commitment organizational transformation tool, 

• they need to ensure that the kind of ma

controls embodied in GAO’s Enterprise Management Maturity Framework are in functioning
GAO-09-158CG 

Ensure Citizen Access 

Government Informati

• The timeliness of the Freedom of 

Act (FOIA) processing continues tchallenge for many agencies 

• Agencies will need to ensure that 

reduce backlogged FOIA requests developed and implemented approand the results monitored 

• GAO will continue to provide agen

Department of Justice, and the Corecommendations to help address and improve FOIA processing
GAO-09-158CG 

Ensure Privacy Protection

Post-9/11 Environme

• Amend applicable laws to better e

protection of citizens’ privacy right

• Enhance protection of personally i

information through revisions or suto OMB’s privacy guidance
GAO-09-158CG 

Further the Exchange of El

Patient Health Informat

• Ensure that privacy principles (such as limit

appropriately) and challenges (such as resopolicy issues) are fully addressed within HHhealth IT strategic plan

• Increase the numbers and kinds of health IT 

are certified, as well as encourage the widesuch systems in the public and private healsectors, while protecting privacy

• Progress made in sharing of electronic patie

information, but more work remains betweeto achieve fully interoperable electronic hea

• Agree to standards for categories of medical info

not yet standardized, 

• Complete the development of modernized system• Transition to these modernized systems
GAO-09-158CG 

Key IT Contacts

• Better manage IT to achieve benefits and control c

Powner/pownerd@gao.gov and Randolph C. Hite/

• Work with the private sector and other levels of go

protect cyber critical infrastructures (David A. Powpownerd@gao.gov)

• Develop and implement well-defined modernizatio

(Randolph C. Hite/hiter@gao.gov)

• Ensure privacy protections in a post-9/11 environm

Willemssen/willemssenj@gao.gov)

• Ensure citizen access to government information (

Willemssen/willemssenj@gao.gov)

• Strengthen information security controls (Greg Wil

wilshusheng@gao.gov)

• Further the exchange of electronic patient health i

(Valerie Melvin/melvinv@gao.gov)
GAO-09-158CG

Upcoming Transiti

Includes Key 

Information Techno

Challenges

Gene L. Dodaro

INPUT Fed Focus 2009

October 21, 2008
GAO-09-158CG 

On the Web

Web site: www.gao.gov/cghome.htm

Contact

Chuck Young, Managing Director, Public AffairsYoungC1@gao.gov (202) 512-4800 

U.S. Government Accountability Office441 G Street NW, Room 7149Washington, D.C. 20548

Copyright

This is a work of the U.S. government and is not copyright protection in the United States. The puproduct may be reproduced and distributed in its without further permission from GAO. However, bwork may contain copyrighted images or other mpermission from the copyright holder may be necwish to reproduce this material separately.