Information security :additional oversight needed to improve programs at small agencies : report to congressional requesters /

Small federal agencies-generally those with 6,000 or fewer employees-are, like larger agencies, at risk from threats to information systems that support their operations and the information they contain, which can include personally identifiably information. Federal law and policy require small agencies to meet information security and privacy requirements and assign responsibilities to OMB for overseeing agencies' activities. OMB has assigned several of these duties to DHS. GAO was asked to review cybersecurity and privacy at small agencies. The objectives of this review were to determine the extent to which (1) small agencies are implementing federal information security and privacy laws and policies and (2) OMB and DHS are overseeing and assisting small agencies in implementing their information security and privacy programs. GAO selected six small agencies with varying characteristics for review; reviewed agency documents and selected systems; and interviewed agency, OMB, and DHS officials.

Author: U.s. Government Accountability Office

Publisher: CreateSpace Independent Publishing Platform

Publication Date: Jul 28, 2017

Number of Pages: 54 pages

Language: English

Binding: Paperback

ISBN-10: 1973962381

ISBN-13: 9781973962380