**GAO-01-1168T**                      Published: Sep 26, 2001. Publicly Released: Sep 26, 2001.                  

-   
-   
-   
-   

    Jump To:  
-  Elder Abuse 
-  Services for Older Adults 
-  State and Local-Level Drivers and Trends 
-  State and Local Fiscal Projections 
-  Federal Borrowing 
-  Managing the Debt 
-  Summary of Funding Provisions 
-  Auditing the Government's Books 
-  Unpacking the Financial Report 
-  Highlights 
-  Recommendations 
-  Background 
-  About This Work 
-  About This Work 
-  Trends 
-  About the Center 
-  Why It's High Risk 
-  What Remains To Be Done 
-  Key Reports 
-  Newest COVID-Related Reports 
-  AI Use Cases 
-  Flood Insurance 
-  Past Pandemic-Related Reports 
-  CARES Act Oversight Reports 
-  All COVID-19 Reports 
-  Report Suspected Fraud 
-  Subjects 
-  How to Get Notified 
-  Past Reports 
-  Public Health Threats 
-  Explore the FY 2022 and 2023 Funds 
-  Status of FY22 Projects 
-  Lessons Learned 
-  Agency Reports 
-  Recent Reports 
-  Recommendations 
-  Supplemental Material 
-  Full Report 
-  Additional Data 
-  View Decision 
-  Downloads 
-  Previously Identified Actions 
-  Related Pages 
-  Associated Agencies 
-  Tough Choices and Opportunities Ahead 
-  Americas Fiscal Future Key Areas 
-  Retirement Security Key Areas 
-  Current List 
-  About The High Risk List 
-  Area Ratings 
-  Previous High Risk Products 
-  Search Federal Vacancies 
-  Past Federal Vacancies 
-  Violation Letters 
-  About the Yellow Book 
-  Advisory Council 
-  Related Resources 
-  Comment Letters 
-  Related Publications 
-  Contacts and Resources 
-  Major Issues Facing the Nation 
-  Meeting Strategic Challenges 
-  Additional Resources 
-  Resources 
-  GAO Contacts 
-  Mission Teams 
-  Operations and Staff Offices  
-  Organization Chart  
-  Why a Career at GAO? 
-  Am I Qualified? 
-  Company Culture 
-  Reasonable Accommodations 
-  Video Gallery 
-  Paid Internships 
-  Student Volunteers 
-  Professional Development Program 
-  Advancement 
-  Executive Candidate Program 
-  Summer Associates 
-  Externships 
-  Benefits 
-  Contacts 

Skip to Highlights

## Highlights

Federal agencies, and other public and private groups, rely extensively on computer systems and electronic data. The security of these systems and data is essential to avoiding disruptions in critical operations and preventing data tampering, fraud, and inappropriate disclosure of sensitive information. However, federal computer systems contain weaknesses that continue to put critical operations and assets at risk. In particular, deficiencies exist in entitywide security programs that are critical to agencies' success in ensuring that risks are understood and  effective controls are implemented. Many efforts have been undertaken to implement the nationally critical infrastructure protection strategy outlined in Presidential Decision Directive (PDD) 63. However, progress in key areas has been limited. Although outreach efforts by many federal entities to establish cooperative relationships with and among private and other nonfederal entities have raised awareness and prompted information sharing, efforts to perform substantive analyses of sector-wide and cross-sector interdependencies and related vulnerabilities have been limited. A major impediment to implementing the strategy outlined in PDD 63 is the lack of a national plan that clearly spells out the roles and responsibilities of federal and nonfederal entities and defines interim objectives.

## Full Report

Full Report (41 pages)

## GAO Contacts

### 

Robert (Bob) Dacey
daceyr@gao.gov

(202) 512-2700

## Office of Public Affairs

### Media Inquiries

Sarah Kaczmarek
kaczmareks@gao.gov

(202) 512-4800

### Public Inquiries

Public Affairs
PublicAffairs@gao.gov

(202) 512-4800

## Topics

Homeland Security

Computer crimesComputer fraudComputer securityComputer virusesE-governmentEmergency preparednessFederal computer incident response capabilityHackersHomeland securityInformation systemsInternal controlsInternetTerrorismTrojan horsesCritical infrastructure protection