GAO: Recent Data Breaches Illustrate Need for Strong Controls across Federal Agencies

The US Government Accountability Office has identified a number of challenges federal agencies face in addressing threats to their cybersecurity, including the following:

• Designing and implementing a risk-based cybersecurity program.
• Enhancing oversight of contractors providing IT services.
• Improving security incident response activities.
• Responding to breaches of personal information.
• Implementing cybersecurity programs at small agencies.

Until federal agencies take actions to address these challenges -- including implementing the hundreds of recommendations GAO and agency inspectors general have made -- federal systems and information, including sensitive personal information, will be at an increased risk of compromise from cyber-based attacks and other threats.