GAO: FBI Needs to Address Weaknesses in Critical Network

Government Information Security Reform Act (GISRA)Government Accountability Office (GAO)General Information
Information Security

Highlights of GAO-07-368, a report to F. James Sensenbrenner Jr., House of Representatives The Federal Bureau of Investigation (FBI) relies on a critical network to electronically communicate, capture, exchange, and access law enforcement and investigative information. Misuse or interruption of this critical network, or disclosure of the information traversing it, would impair FBI’s ability to fulfill its missions. Effective information security controls are essential for ensuring that information technology resources and information are adequately protected from inadvertent or deliberate misuse, fraudulent use, disclosure, modification, or destruction. GAO was asked to assess information security controls for one of FBI’s critical networks. To assess controls, GAO conducted a vulnerability assessment of the internal network and evaluated the bureau’s information security program associated with the network operating environment. This report summarizes weaknesses in information security controls in one of FBI’s critical networks.

> Read entire regulation (log in required - registration is free)