GAO: Federal Telework Essential in Emergencies, Has Risks

Telework is “essential” for federal operations in emergencies, but it creates cyber risks, GAO said Thursday. All 12 agencies examined have the technology to support telework, but not all had “fully addressed relevant guidance for securing their remote access systems,” the auditor said. The study included offices at DOJ, and the departments of Homeland Security and Transportation. If agencies don’t “sufficiently document relevant security controls, assess the controls, and fully document remedial actions for weaknesses identified in security controls, they are at increased risk that vulnerabilities in their systems that provide remote access could be exploited,” the report said. Agencies agreed with recommendations to “document and assess relevant controls, and to fully document remedial actions for systems supporting remote access.”