Agencies slowly implementing key info security system

The General Accounting Office on Tuesday released a report on the federal government's public key infrastructure (PKI) strategy for e-government security, finding that while many agencies have made progress, there are "formidable" challenges to full implementation.

The report, generated on request from the House Government Reform Subcommittee on Government Efficiency, recommended that the Office of Management and Budget establish a government-wide framework to give agencies direction for implementing PKIs.

A PKI is an integrated security system for hardware, software, policies and people to protect sensitive communications and transactions.

Progress was made on spreading awareness of PKI technology, and a prototype program has been constructed, GAO reported. A production version is expected to be online by the end of 2001.

Challenges remain in the areas of interoperability, experience with systems, affordability, clarity and enforcement of policies, and trained personnel, GAO found.