Federal Reserve Banks: Areas for Improvement in Information Security Controls, GAO-08-836R, June 16, 2008
“Our fiscal year 2007 audit procedures identified 12 information security control deficiencies, all of which relate to general controls. Specifically, the control deficiencies identified were in the areas of entitywide security program planning and management, access control, and system software. In the Limited Official Use Only report, we made 14 detailed recommendations to address these control deficiencies. None of our findings pose significant risks to the FRB financial systems.”
