DHs' (Department of Homeland Security) Progress in Addressing Technical Security Challenges at Washington Dulles International Airport (Redacted)

摘要

We initiated a program to determine the extent to which critical Department of Homeland Security sites comply with the departments technical and information security policies and procedures. In January 2007, we reported that information technology security controls implemented by U.S. Customs and Border Protection and the Transportation Security Administration at Washington Dulles International Airport had deficiencies that, if exploited, could result in the loss of confidentiality, integrity, and availability of the automated systems used to perform their mission-critical activities. We also identified actions that these components could take to improve information technology security. We conducted a follow-up evaluation to determine whether corrective actions for the reported weaknesses had been implemented, and whether those actions comply with the departments and components technical and information security policies and procedures. We performed onsite verification of the corrective actions, interviewed department staff, and conducted technical tests of internal controls.