GAO and CRS Cybersecurity Reports

The news that various federal web sites were subject to a denial of service attack over the 4th of July weekend came as a bit of a surprise.  North Korea is identified as the likely culprit.  Surprise or not, it's not as if the possibility of a foreign cyber attack is an unknown quantity for the U.S. government. Here are various reports from the GAO and CRS that address government security issues.

• National Cybersecurity Strategy: Key Improvements Are Needed to Strengthen the Nation's Posture (GAO-09-432T, March 10, 2009).

• Cybersecurity: Continued Federal Efforts Are Needed to Protect Critical Systems and Information (GAO-09-835T, June 25, 2009).

• Information Security: Cyber Threats and Vulnerabilities Place Federal Systems at Risk (GAO-09-661T, May 5, 2009).

• Federal Information Security Issues (GAO-09-817R, June 30, 2009).

• Comprehensive National Cybersecurity Initiative:  Legal Authorities and Policy Considerations (R40427, March 10, 2009).

• Creating a National Framework for Cybersecurity:  An Analysis of Issues and Options (RL32777, February 22, 2005).   [MG]