GAO Reports – Cybersecurity – Week of 1-14-23

This week the Government Accountability Office (GAO) published a report on “Challenges in Establishing a Comprehensive Cybersecurity Strategy and Performing Effective Oversight”. The report summarizes previous GAO reports on the topic and looks at the recommendations that have not yet been implemented to date.

The ‘Overview’ section of the report notes that:

“This is the first in a series of four reports that lay out the main cybersecurity areas the federal government should urgently address, beginning with the need for a comprehensive strategy and effective oversight.1 We have made about 335 recommendations in public reports since 2010 with respect to this area. About 190 of these recommendations were not implemented as of December 2022. Until these are fully implemented, federal agencies will be more limited in their ability to protect private and sensitive data entrusted to them.””