GAO: Sensitive Government Data at Risk of Disclosure is at risk of disclosure to unauthorized individuals. NASA, NRC, OPM and VA have all been inconsistent in implementation of access controls, report says. GAO also says the four agencies have weaknesses in patching software vulnerabilities and planning for contingencies because they didn’t fully implement key parts of their information security programs. The agencies generally concurred with GAO’s recommendations, with the exception of OPM’s CIO, who says GAO failed to provide enough information to fully respond.”]
Source: https://www.cuinfosecurity.com/gao-sensitive-government-data-at-risk-disclosure-a-9217

