SEC Needs to Improve Controls over Financial Systems and Data

This report assesses the Security and Exchange Commission's (SEC) information security controls, determining their effectiveness. The report finds that weaknesses in the SEC's efforts to shore up information technology persist and must be dealt with. These weaknesses "limited their effectiveness in protecting the confidentiality, integrity, and availability of a key financial system," (p. "highlight") in part, because the SEC had not substantially monitored information security controls during the migration of a key financial system

View Source