Information Security: Sustained Management Commitment and Oversight Are Vital to Resolving Long-standing Weaknesses at the Department of Veterans Affairs

United States. Government Accountability Office.

United States. Government Accountability Office.

关键词: Government accountability -- United States.;    veterans;    information security;    information security;    letter report;   

RP-ID  :  GAO-07-1019
RP-ID  :  266560

美国|英语

来源: UNT Digital Library

【 摘 要 】

A letter report issued by the Government Accountability Office with an abstract that begins "In May 2006, the Department of Veterans Affairs (VA) announced that computer equipment containing personal information on approximately 26.5 million veterans and active duty military personnel had been stolen. Given the importance of information technology (IT) to VA's mission, effective information security controls are critical to maintaining public and veteran confidence in its ability to protect sensitive information. GAO was asked to evaluate (1) whether VA has effectively addressed GAO and VA Office of Inspector General (IG) information security recommendations and (2) actions VA has taken since May 2006 to strengthen its information security practices and secure personal information. To do this, GAO examined security policies and action plans, interviewed pertinent department officials, and conducted testing of encryption software at select VA facilities."