Cybersecurity: NIH needs to take further actions to resolve control deficiencies and improve its program : report to congressional requesters
- Collection:
- Health Policy and Services Research
- Alternate Title(s):
- NIH needs to take further actions to resolve control deficiencies and improve its program
- Contributor(s):
- United States. Government Accountability Office, issuing body. United States. Congress, issuing body.
- Publication:
- Washington, DC : United States Government Accountability Office, December 2021
- Language(s):
- English
- Format:
- Text
- Subject(s):
- Computer Security -- legislation & jurisprudence Government Regulation United States National Institutes of Health (U.S.)
- Genre(s):
- Technical Report
- Abstract:
- Why GAO did this study. NIH responsibilities include conducting research on the prevention of infectious diseases such as COVID-19, administering over $30 billion annually in medical research grants, and supporting research on pathogens, including those that have the potential to pose a severe threat to public health and safety. In carrying out its mission, NIH relies extensively on information technology systems to receive, process, and maintain sensitive data. Accordingly, effective information security controls are essential to ensure the confidentiality, integrity, and availability of the agency’s systems. GAO was asked to examine cybersecurity at NIH. In June 2021, GAO issued a limited official use only report on the extent to which NIH had effectively implemented system controls and an information security program to protect the confidentiality, integrity, and availability of its information on selected information systems. This current report is a public version of the June 2021 report based on GAO’s review of the agency’s information security program and 11 selected systems. In addition, for this public report, GAO determined the extent to which NIH has taken corrective actions to address the previously identified security program and system control deficiencies and related recommendations for improvement. GAO reviewed supporting documents regarding NIH’s actions on the previously identified recommendations.
- Copyright:
- The National Library of Medicine believes this item to be in the public domain. (More information)
- Extent:
- 1 online resource (1 PDF file (iii, 84 pages))
- Illustrations:
- Illustrations
- NLM Unique ID:
- 9918383085006676 (See catalog record)
- Permanent Link:
- http://resource.nlm.nih.gov/9918383085006676