GAO has issued a report on the Department of Homeland Security’s efforts to improve and promote the cybersecurity of federal and private-sector computer systems and networks, concluding that further improvements are needed.
GAO acknowledges that DHS has made important progress in implementing programs and activities that are intended to mitigate cybersecurity risks on the computer systems and networks supporting federal operations and our nation’s critical infrastructure. Nevertheless, auditors found the department has not taken sufficient actions to ensure that it successfully mitigates cybersecurity risks on federal and private-sector computer systems and networks.
“Until DHS fully and effectively implements its cybersecurity authorities and responsibilities, the department’s ability to improve and promote the cybersecurity of federal and private-sector networks will be limited,” GAO wrote.