Citation Edit

Government Accountability Office, Information Security: Federal Communications Commission Needs to Strengthen Controls over Enhanced Secured Network Project (GAO-13-155) (Jan. 25, 2013) (full-text).

Overview Edit

The GAO was asked to assess the extent to which the FCC has (1) effectively implemented appropriate information security controls for the initial components of the Enhanced Secured Network (ESN) project, and (2) implemented appropriate procedures to manage and oversee the ESN project.

The GAO found that the FCC did not effectively implement appropriate information security controls in the initial components of the ESN project. Weaknesses identified in the Commission's deployment of components of the ESN project as of August 2012 resulted in unnecessary risk that sensitive information could be disclosed, modified, or obtained without authorization.

GAO made seven recommendations to the FCC to implement management controls to help ensure that ESN meets its objective of securing FCC's systems and information.