Information Technology: Treasury's Security Management of TNet Needs Improvement.

摘要

This report represents the results of our audit of the Department of the Treasury's (Treasury) security management of Treasury. TNet is a wide area network that provides Treasury with e-mail, Internet, and voice traffic applications. The TNet task order was awarded under the General Services Administration Networx universal contract (Contract Number GS00T07NSD0007). Network (TNet). The objective of this audit was to determine whether Treasury ensured that TNet security controls met federal standards and guidelines. To accomplish our objective, we reviewed and analyzed TNet's security-related documentation. We performed observation and testing at the TNet contractor, AT&T, facilities in Oakton and Ashburn, Virginia. We also interviewed Treasury and AT&T personnel responsible for the security management of TNet.