The Government Accountability Office found that many federal agencies continue to have what auditors believe are weaknesses in several security aspects that affect the implementation of information security programs.GAO said in a report published Tuesday that 24 agencies identified vulnerabilities in the areas of access control, configuration management, segregation of duties, contingency planning and security management.
The report also noted that the application of requirements under the Federal Information Security Management Act of 2002 is also inconsistent due to incomplete guidance for inspectors general.
GAO recommends that the Office of Management and Budget work with the Department of Homeland Security to bolster guidance on security program reports to generate consistent performance.
