Critical Infrastructure Protection: Cybersecurity Guidance Is Available, but More Can Be Done to Promote Its Use

United States. Government Accountability Office.

United States. Government Accountability Office.

关键词: Government accountability -- United States.;    homeland security;    information security;    critical infrastructure protection;    letter report;   

RP-ID  :  GAO-12-92
RP-ID  :  586799

美国|英语

来源: UNT Digital Library

【 摘 要 】

A letter report issued by the Government Accountability Office with an abstract that begins "A wide variety of cybersecurity guidance is available from national and international organizations for entities within the seven critical infrastructure sectors GAO reviewed--banking and finance; communications; energy; health care and public health; information technology; nuclear reactors, material, and waste; and water. Much of this guidance is tailored to business needs of entities or provides methods to address unique risks or operations. In addition, entities operating in regulated environments are subject to mandatory standards to meet their regulatory requirements; entities operating outside of a regulatory environment may voluntarily adopt standards and guidance. While private sector coordinating council representatives confirmed lists of cybersecurity guidance that they stated were used within their respective sectors, the representatives emphasized that the lists were not comprehensive and that additional standards and guidance are likely used."