Office of Inspector General Audit Report: DOT Information Security Program: Project ID: FI-2003-086

We issued our report on DOT's information security program to meet the legislative mandate of the Federal Information Security Management Act. We found that in the past year DOT has made significant progress toward meeting its commitment to improve information security; most noteworthy is its improvement in protecting its computer systems from attack by outsiders. However, DOT still needs to make progress in securing its computer systems from attack by insiders: employees, contractors, grantees, and industry associations. According to the FBI, insiders remain a major threat; insiders were responsible for about 50 percent of unauthorized computer activities in 2003.