Ransomware—Holding IT Systems and Data Hostage
GAO Blog – How much would a government entity or business pay to restart its operations after an attack on its critical IT systems? $4 million? $11 million? Those behind
June 30, 2021
GAO
What Is Cyber Insurance, and Why Is It In High Demand?
(GAO) Large-scale cyberattacks—like those on Colonial Pipeline earlier this month and SolarWinds in September—have highlighted the growing threats these hacks pose to U.S. businesses. As threats grow, so do the number of
June 1, 2021
Cybersecurity:Federal Agencies Need to Implement Recommendations to Manage Supply Chain Risks
GAO-21-594T Fast Facts The supply chain for information and communication technologies can be an access point for hackers. Compromised SolarWinds Orion network management software, for example, was sent to an
May 25, 2021
Cyber Insurance:Insurers and Policyholders Face Challenges in an Evolving Market
GAO Fast Facts Cyber insurance can help offset the costs of responding to and recovering from cyberattacks. The growing frequency and severity of cyberattacks have led more insurance clients to
May 20, 2021
Colonial Pipeline Cyberattack Highlights Need for Better Federal and Private-Sector Preparedness (infographic)
The recent cybersecurity attack on the Colonial Pipeline Company has led to temporary disruption in the delivery of gasoline and other petroleum products across much of the southeast United States.
May 18, 2021
Information Environment: DOD Operations Need Enhanced Leadership and Integration of Capabilities
GAO-21-525T Fast Facts Potential adversaries (such as Russia and China) are using information to achieve their national objectives and undermine the security and principles of the United States—e.g., propaganda and
April 30, 2021
GAO – Agencies Need to Develop and Implement Modernization Plans for Critical Legacy Systems
Fast Facts The U.S. government plans to spend over $100 billion this fiscal year on information technology. Most of that will be used to operate and maintain existing systems, including
April 28, 2021
SolarWinds Cyberattack Demands Significant Federal and Private-Sector Response (infographic)
GAO – The cybersecurity breach of SolarWinds’ software is one of the most widespread and sophisticated hacking campaigns ever conducted against the federal government and private sector. In today’s WatchBlog
April 22, 2021
Federal Government Needs to Urgently Pursue Critical Actions to Address Major Cybersecurity Challenges
High-Risk Series: GAO-21-288 Fast Facts The federal government needs to move with greater urgency to improve the nation’s cybersecurity as the country faces grave and rapidly evolving threats. This report
March 18, 2021
Electricity Grid Cybersecurity:DOE Needs to Ensure Its Plans Fully Address Risks to Distribution Systems
Fast Facts The U.S. electricity grid’s distribution systems—the parts of the grid that carry electricity to consumers—are becoming more vulnerable to cyberattacks, in part because of the introduction of and
March 18, 2021
Electromagnetic Spectrum Operations: DOD Needs to Take Action to Help Ensure Superiority
GAO-21-440T Fast Facts The U.S. risks losing control of the battlefield if it doesn’t control the electromagnetic spectrum, according to the Defense Department. This range of frequencies is critical for
March 18, 2021
Weapon Systems Cybersecurity: Guidance Would Help DOD Programs Better Communicate Requirements to Contractors
Fast Facts The Department of Defense has struggled to ensure its weapons systems can withstand cyberattacks. Since we last reported, DOD has taken some positive steps toward that goal, like
March 4, 2021
Defined Contribution Plans:Federal Guidance Could Help Mitigate Cybersecurity Risks in 401(k) and Other Retirement Plans
GAO-21-25 Fast Facts In 2018, about 106 million people participated in employer-sponsored defined contribution retirement plans, such as 401(k) plans. Assets in these plans were worth about $6.3 trillion. A
February 11, 2021
Federal Agencies Need to Take Urgent Action to Manage Supply Chain Risks
GAO Fast Facts Federal agencies rely on information and communications technology products and services to carry out their operations. The global supply chain for this technology faces threats, including from
December 9, 2020
Science & Tech Spotlight:Deepfakes
GAO-20-379SP Fast Facts A deepfake is a video, photo, or audio recording that seems real but has been manipulated with artificial intelligence technologies. Deepfakes are usually pornographic and disproportionately victimize
February 20, 2020