GAO: Cybersecurity:State Needs to Expeditiously Implement Risk Management and Other Key Practices

The State Department carries out American diplomacy and helps shape U.S. foreign policy. Securing the IT systems that support State’s mission is crucial to its ability to manage its cybersecurity risks.

But State hasn’t fully implemented its cybersecurity risk program. We found that it needs to:

Implement processes to detect and respond to cybersecurity incidents

Update hardware and software that aren’t supported by vendors

Strengthen the Chief Information Officer’s ability to manage and oversee all IT infrastructure

Better communicate IT-related requirements to its overseas posts

Our 15 recommendations address these and other issues.

Read the report here.

🔊 Listen to Story