Federal Information Security: Actions Needed to Address Widespread Weaknesses
Jack L. Brock · Defense Technical Information Center (DTIC) · 2000
I am pleased to be here today to discuss federal information security. Our recent audit findings in this area present a disturbing picture of the state of computer security practices at individual agencies. Our work-and the work of other audit entities-has demonstrated that many agencies' critical operations and processes are at serious risk of disruption because of weak security practices. We have designated computer security as a high-risk area, and the President's plan for protecting critical infrastructure' reinforces this designation. At your request, I will discuss actions agencies can take immediately to strengthen their security programs as well as other actions required to make more fundamental and long-term improvements. Additionally, I will discuss government wide actions needed to support and encourage agency progress and congressional oversight of this progress.