12 photos
-
Figure 1: Number of Federal Risk and Authorization Management Program (FedRAMP) Authorizations issued by the 24 Chief Financial Officers Act Agencies from June 2017 through July 2019
- Uploaded by: U.S. Government Accountability Office
- License: United States Government Work
- 0 comments
- 0 favorites
- 8,756 views
- Date uploaded: 2019-12-12
- Tags: gao, governmentaccountabilityoffice, usgovernmentaccountabilityoffice, usgao, unitedstatesgovernmentaccountabilityoffice, government, congress, watchdog, oversight, governmentwatchdog, cloudcomputingsecurity, gao20126, ato, authorizationtooperate, cfo, chieffinancialofficersactof1990, cis, controlimplementationsummary, cio, chiefinformationofficer, csp, cloudserviceprovider, dhs, departmentofhomelandsecurity, dod, departmentofdefense, epa, environmentalprotectionagency, fedramp, federalriskandauthorizationmanagementprogram, fisma, federalinformationsecuritymodernizationactof2014, gsa, generalservicesadministration, hhs, departmentofhealthandhumanservices, it, informationtechnology, iaas, infrastructureasaservice, jab, jointauthorizationboard, nist, nationalinstituteofstandardsandtechnology, omb, officeofmanagementandbudget, paas, platformasaservice, pmo, programmanagementoffice, saas, softwareasaservice, pato, provisionalauthorizationtooperate, sar, securityassessmentreport, ssp, systemsecurityplan, 3paos, thirdpartyassessmentorganizations, tic, trustedinternetconnection, usaid, unitedstatesagencyforinternationaldevelopment
- Visibility: public
-
Figure 6: Continuous Diagnostics and Mitigation Program Data Flow
- Uploaded by: U.S. Government Accountability Office
- License: United States Government Work
- 0 comments
- 0 favorites
- 2,076 views
- Date uploaded: 2022-04-08
- Tags: gao, governmentaccountabilityoffice, usgovernmentaccountabilityoffice, usgao, unitedstatesgovernmentaccountabilityoffice, government, congress, watchdog, oversight, governmentwatchdog, cybersecurity, gao22104364, aal3, authenticatorassurancelevel3, cap, crossagencypriority, cdc, centersfordiseasecontrolandprevention, cdm, continuousdiagnosticsandmitigation, cfo, chieffinancialofficer, cigie, counciloftheinspectorsgeneralonintegrityandefficiency, cio, chiefinformationofficer, cisa, cybersecurityandinfrastructuresecurityagency, ciso, chiefinformationsecurityofficer, dhs, departmentofhomelandsecurity, dmdc, defensemanpowerdatacenter, dod, departmentofdefense, epa, environmentalprotectionagency, fedramp, federalriskandauthorizationmanagementprogram, fisma, federalinformationsecuritymodernizationactof2014, gsa, generalservicesadministration, hhs, departmentofhealthandhumanservices, hud, departmentofhousingandurbandevelopment, ig, inspectorgeneral, nist, nationalinstituteofstandardsandtechnology, nrc, nuclearregulatorycommission, nsf, nationalsciencefoundation, omb, officeofmanagementandbudget, pii, personallyidentifiableinformation, piv, personalidentityverification, ssa, socialsecurityadministration, uscert, unitedstatescomputeremergencyreadinessteam, usaid, usagencyforinternationaldevelopment, va, department, veterans, affairs
- Visibility: public
-
Figure 2: Information Security Incidents Reported by Federal Agencies and Categorized by Threat Vector in Fiscal Year 2020
- Uploaded by: U.S. Government Accountability Office
- License: United States Government Work
- 0 comments
- 1 favorite
- 2,069 views
- Date uploaded: 2022-04-08
- Tags: gao, governmentaccountabilityoffice, usgovernmentaccountabilityoffice, usgao, unitedstatesgovernmentaccountabilityoffice, government, congress, watchdog, oversight, governmentwatchdog, cybersecurity, gao22104364, aal3, authenticatorassurancelevel3, cap, crossagencypriority, cdc, centersfordiseasecontrolandprevention, cdm, continuousdiagnosticsandmitigation, cfo, chieffinancialofficer, cigie, counciloftheinspectorsgeneralonintegrityandefficiency, cio, chiefinformationofficer, cisa, cybersecurityandinfrastructuresecurityagency, ciso, chiefinformationsecurityofficer, dhs, departmentofhomelandsecurity, dmdc, defensemanpowerdatacenter, dod, departmentofdefense, epa, environmentalprotectionagency, fedramp, federalriskandauthorizationmanagementprogram, fisma, federalinformationsecuritymodernizationactof2014, gsa, generalservicesadministration, hhs, departmentofhealthandhumanservices, hud, departmentofhousingandurbandevelopment, ig, inspectorgeneral, nist, nationalinstituteofstandardsandtechnology, nrc, nuclearregulatorycommission, nsf, nationalsciencefoundation, omb, officeofmanagementandbudget, pii, personallyidentifiableinformation, piv, personalidentityverification, ssa, socialsecurityadministration, uscert, unitedstatescomputeremergencyreadinessteam, usaid, usagencyforinternationaldevelopment, va, department, veterans, affairs
- Visibility: public
-
Agencies' Implementation of the Key Cloud Security Practices for Each of the Selected Systems
- Uploaded by: U.S. Government Accountability Office
- License: United States Government Work
- 0 comments
- 1 favorite
- 981 views
- Date uploaded: 2023-06-15
- Tags: gao, governmentaccountabilityoffice, usgovernmentaccountabilityoffice, usgao, unitedstatesgovernmentaccountabilityoffice, government, congress, watchdog, oversight, governmentwatchdog, cloudsecurity, gao23105482, ato, authoritytooperate, cisa, cybersecurityandinfrastructuresecurityagency, csp, cloudserviceprovider, dhs, departmentofhomelandsecurity, fedramp, federalriskandauthorizationmanagementprogram, gsa, generalservicesadministration, iaas, infrastructureasaservice, icam, identitycredentialandaccessmanagement, nist, nationalinstituteofstandardsandtechnology, omb, officeofmanagementandbudget, paas, platformasaservice, pmo, programmanagementoffice, saas, softwareasaservice, sla, servicelevelagreement
- Visibility: public
-
Figure 2: Security Responsibilities Associated with On-Premises Computing and Each Cloud Service Model
- Uploaded by: U.S. Government Accountability Office
- License: United States Government Work
- 0 comments
- 0 favorites
- 774 views
- Date uploaded: 2025-04-17
- Tags: gao, governmentaccountabilityoffice, usgovernmentaccountabilityoffice, usgao, unitedstatesgovernmentaccountabilityoffice, government, congress, watchdog, oversight, governmentwatchdog, cloudcomputing, gao25106369, ceo, chiefexecutiveofficer, cio, chiefinformationofficer, cisa, cybersecurityandinfrastructuresecurityagency, fedramp, federalriskandauthorizationmanagementprogram, iaas, infrastructureasaservice, iac, infrastructureascode, it, informationtechnology, icam, identitycredentialandaccessmanagement, nist, nationalinstituteofstandardsandtechnology, omb, officeofmanagementandbudget, paas, platformasaservice, pac, policyascode, provider, cloudserviceprovider, saas, softwareasaservice
- Visibility: public
-
Figure 1: Nineteen Leading Practices that Companies Reported Using for Adopting Cloud Services
- Uploaded by: U.S. Government Accountability Office
- License: United States Government Work
- 0 comments
- 0 favorites
- 770 views
- Date uploaded: 2025-04-17
- Tags: gao, governmentaccountabilityoffice, usgovernmentaccountabilityoffice, usgao, unitedstatesgovernmentaccountabilityoffice, government, congress, watchdog, oversight, governmentwatchdog, cloudcomputing, gao25106369, ceo, chiefexecutiveofficer, cio, chiefinformationofficer, cisa, cybersecurityandinfrastructuresecurityagency, fedramp, federalriskandauthorizationmanagementprogram, iaas, infrastructureasaservice, iac, infrastructureascode, it, informationtechnology, icam, identitycredentialandaccessmanagement, nist, nationalinstituteofstandardsandtechnology, omb, officeofmanagementandbudget, paas, platformasaservice, pac, policyascode, provider, cloudserviceprovider, saas, softwareasaservice
- Visibility: public
-
Figure 3: GAO's 10 High-Risk Critical Action Areas Addressed by Executive Order 14028 (EO)
- Uploaded by: U.S. Government Accountability Office
- License: United States Government Work
- 0 comments
- 1 favorite
- 711 views
- Date uploaded: 2024-04-24
- Tags: gao, governmentaccountabilityoffice, usgovernmentaccountabilityoffice, usgao, unitedstatesgovernmentaccountabilityoffice, government, congress, watchdog, oversight, governmentwatchdog, gao24106343, cdm, continuousdiagnosticsandmitigation, cisa, cybersecurityandinfrastructuresecurityagency, ciso, chiefinformationsecurityofficer, dhs, departmentofhomelandsecurity, dod, departmentofdefense, edr, endpointdetectionandresponse, fceb, federalcivilianexecutivebranch, fedramp, federalriskandauthorizationmanagementprogram, fisma, federalinformationsecuritymodernizationactof2014, it, informationtechnology, nist, nationalinstituteofstandardsandtechnology, nsa, nationalsecurityagency, omb, officeofmanagementandbudget, oncd, officeofthenationalcyberdirector, sbom, softwarebillofmaterials, zta, zerotrustarchitecture
- Visibility: public
-
Figure 1: Four Major Cybersecurity Challenges and 10 Associated Critical Actions
- Uploaded by: U.S. Government Accountability Office
- License: United States Government Work
- 0 comments
- 1 favorite
- 699 views
- Date uploaded: 2024-04-24
- Tags: gao, governmentaccountabilityoffice, usgovernmentaccountabilityoffice, usgao, unitedstatesgovernmentaccountabilityoffice, government, congress, watchdog, oversight, governmentwatchdog, gao24106343, cdm, continuousdiagnosticsandmitigation, cisa, cybersecurityandinfrastructuresecurityagency, ciso, chiefinformationsecurityofficer, dhs, departmentofhomelandsecurity, dod, departmentofdefense, edr, endpointdetectionandresponse, fceb, federalcivilianexecutivebranch, fedramp, federalriskandauthorizationmanagementprogram, fisma, federalinformationsecuritymodernizationactof2014, it, informationtechnology, nist, nationalinstituteofstandardsandtechnology, nsa, nationalsecurityagency, omb, officeofmanagementandbudget, oncd, officeofthenationalcyberdirector, sbom, softwarebillofmaterials, zta, zerotrustarchitecture
- Visibility: public
-
Figure 1: Examples of Federal Uses of Spectrum
- Uploaded by: U.S. Government Accountability Office
- License: United States Government Work
- 0 comments
- 0 favorites
- 431 views
- Date uploaded: 2025-06-27
- Tags: gao, governmentaccountabilityoffice, usgovernmentaccountabilityoffice, usgao, unitedstatesgovernmentaccountabilityoffice, government, congress, watchdog, oversight, governmentwatchdog, spectrumitmodernization, gao25107509, conops, conceptofoperations, dcfs, datacaptureandforwardingsystem, dod, departmentofdefense, elcid, equipmentlocationcertificationinformationdatabaseonline, fas, frequencyassignmentsubcommittee, fcc, federalcommunicationscommission, fedramp, federalriskandauthorizationmanagementprogram, fmrs, frequencymanagementandreportingsystem, fy, fiscalyear, fy21ndaa, williammmacthornberrynationaldefenseauthorizationactforfiscalyear2021, gmf, governmentmasterfile, icam, identitycredentialandaccessmanagement, irac, interdepartmentradioadvisorycommittee, iracnet, interdepartmentradioadvisorycommitteenetwork, it, informationtechnology, nist, nationalinstituteofstandardsandtechnology, ntia, nationaltelecommunicationsandinformationadministration, omb, officeofmanagementandbudget, rmf, riskmanagementframework, snss, spectrumnationalsecuritysystems, ssp, systemsecurityplan, sxxi, spectrumxxi, xml, extensiblemarkuplanguage
- Visibility: public
-
Figure 3: National Telecommunications and Information Administration (NTIA) Spectrum IT Modernization Anticipated Improvements
- Uploaded by: U.S. Government Accountability Office
- License: United States Government Work
- 0 comments
- 0 favorites
- 429 views
- Date uploaded: 2025-06-27
- Tags: gao, governmentaccountabilityoffice, usgovernmentaccountabilityoffice, usgao, unitedstatesgovernmentaccountabilityoffice, government, congress, watchdog, oversight, governmentwatchdog, spectrumitmodernization, gao25107509, conops, conceptofoperations, dcfs, datacaptureandforwardingsystem, dod, departmentofdefense, elcid, equipmentlocationcertificationinformationdatabaseonline, fas, frequencyassignmentsubcommittee, fcc, federalcommunicationscommission, fedramp, federalriskandauthorizationmanagementprogram, fmrs, frequencymanagementandreportingsystem, fy, fiscalyear, fy21ndaa, williammmacthornberrynationaldefenseauthorizationactforfiscalyear2021, gmf, governmentmasterfile, icam, identitycredentialandaccessmanagement, irac, interdepartmentradioadvisorycommittee, iracnet, interdepartmentradioadvisorycommitteenetwork, it, informationtechnology, nist, nationalinstituteofstandardsandtechnology, ntia, nationaltelecommunicationsandinformationadministration, omb, officeofmanagementandbudget, rmf, riskmanagementframework, snss, spectrumnationalsecuritysystems, ssp, systemsecurityplan, sxxi, spectrumxxi, xml, extensiblemarkuplanguage
- Visibility: public
-
Figure 5: Assessment of National Telecommunications and Information Administration (NTIA) Spectrum IT System Security Plan Elements
- Uploaded by: U.S. Government Accountability Office
- License: United States Government Work
- 0 comments
- 0 favorites
- 401 views
- Date uploaded: 2025-06-27
- Tags: gao, governmentaccountabilityoffice, usgovernmentaccountabilityoffice, usgao, unitedstatesgovernmentaccountabilityoffice, government, congress, watchdog, oversight, governmentwatchdog, spectrumitmodernization, gao25107509, conops, conceptofoperations, dcfs, datacaptureandforwardingsystem, dod, departmentofdefense, elcid, equipmentlocationcertificationinformationdatabaseonline, fas, frequencyassignmentsubcommittee, fcc, federalcommunicationscommission, fedramp, federalriskandauthorizationmanagementprogram, fmrs, frequencymanagementandreportingsystem, fy, fiscalyear, fy21ndaa, williammmacthornberrynationaldefenseauthorizationactforfiscalyear2021, gmf, governmentmasterfile, icam, identitycredentialandaccessmanagement, irac, interdepartmentradioadvisorycommittee, iracnet, interdepartmentradioadvisorycommitteenetwork, it, informationtechnology, nist, nationalinstituteofstandardsandtechnology, ntia, nationaltelecommunicationsandinformationadministration, omb, officeofmanagementandbudget, rmf, riskmanagementframework, snss, spectrumnationalsecuritysystems, ssp, systemsecurityplan, sxxi, spectrumxxi, xml, extensiblemarkuplanguage
- Visibility: public
-
Agencies' Login.gov and Commercial Solution Spending for Fiscal Years 2020 to 2023
- Uploaded by: U.S. Government Accountability Office
- License: United States Government Work
- 0 comments
- 0 favorites
- 297 views
- Date uploaded: 2025-07-08
- Tags: gao, governmentaccountabilityoffice, usgovernmentaccountabilityoffice, usgao, unitedstatesgovernmentaccountabilityoffice, government, congress, watchdog, oversight, governmentwatchdog, identityverification, gao25107000, aal, authenticatorassurancelevel, cfoact, chieffinancialofficersactof1990, fedramp, federalriskandauthorizationmanagementprogram, fisma, federalinformationsecuritymodernizationactof2014, gsa, generalservicesadministration, ial, identityassurancelevel, it, informationtechnology, nist, nationalinstituteofstandardsandtechnology, omb, officeofmanagementandbudget, pii, personallyidentifiableinformation
- Visibility: public