Information Security: Securities and Exchange Commission Needs to Address Weak Controls over Financial and Sensitive Data GAO-05-262, March 23, 2005. Highlights-PDF
“SEC has not effectively implemented information system controls to protect the integrity, confidentiality, and availability of its financial and sensitive data. Specifically, the commission had not consistently implemented effective electronic access controls, including user accounts and passwords, access rights and permissions, network security, or audit and monitoring of security-relevant events to prevent, limit, and detect access to its critical financial and sensitive systems.”
