GAO Recommends Comprehensive Federal Cybersecurity Strategy

The federal government should establish a comprehensive strategy for national cybersecurity and for mitigating global supply chain risks, the GAO said Friday. It urged federal agencies to implement hundreds of “critical” recommendations, including some 400 IT management and 750 cybersecurity proposals. Agencies have implemented about 75% of 4,700 recommendations since 2010, GAO said. It noted that in December, few of the 23 civilian federal agencies GAO reviewed “implemented foundational practices for managing information and communication technology supply chain risks.”