Information security : agencies need to improve cyber incident response practices : report to Congressional requesters.

Format:

Book

Government document

Author/Creator:

United States. Government Accountability Office, issuing body.

Standardized Title:

Information security (2014 April)

Language:

English

Subjects (All):

United States. Department of Homeland Security--Rules and practice--Evaluation.

United States.

United States Computer Emergency Readiness Team--Rules and practice--Evaluation.

United States Computer Emergency Readiness Team.

United States. Department of Homeland Security.

Administrative agencies--United States--Rules and practice--Evaluation.

Administrative agencies.

Cyberterrorism--United States.

Cyberterrorism.

Genre:

Rules and practice.

Physical Description:

1 online resource (ii, 50 pages) : color illustrations

Other Title:

Agencies need to improve cyber incident response practices

Cyber incident response

Place of Publication:

[Washington, D.C.] : United States Government Accountability Office, 2014.

System Details:

text file PDF

Summary:

The number of cyber incidents reported by federal agencies increased in fiscal year 2013 significantly over the prior 3 years. An effective response to a cyber incident is essential to minimize any damage that might be caused. Department of Homeland Security (DHS) and United States Computer Emergency Readiness Team (US-CERT) have a role in helping agencies detect, report, and respond to cyber incidents. GAO was asked to review federal agencies' ability to respond to cyber incidents. To do this, GAO reviewed the extent to which (1) federal agencies are effectively responding to cyber incidents and (2) DHS is providing cybersecurity incident assistance to agencies. To do this, GAO used a statistical sample of cyber incidents reported in fiscal year 2012 to project whether 24 major federal agencies demonstrated effective response activities. In addition, GAO evaluated incident response policies, plans, and procedures at 6 randomly-selected federal agencies to determine adherence to federal guidance. GAO also examined DHS and US-CERT policies, procedures, and practices, and surveyed officials from the 24 federal agencies on their experience receiving incident assistance from DHS.

Contents:

Background

Agencies did not consistently demonstrate effective cyber incident response practices

Agencies were generally satisfied with services provided by DHS, but reported that DHS could enhance assistance to agencies

Conclusions.

Notes:

"April 2014."

Includes bibliographical references.

Online resource; title from PDF title page (GAO, viewed June 10, 2014).

"GAO-14-354."

OCLC:

881226785