The Financial Crimes Enforcement Network (FinCEN) relies extensively on its own computer systems, as well as those at the IRS to administer the Bank Secrecy Act (BSA) and fulfill its mission of safeguarding the U.S. financial system from financial crimes. Effective info. security controls over these systems are essential to ensuring that BSA data, which contains sensitive financial info. used by law enforcement agencies to prosecute financial crime, is protected from inappropriate or deliberate misuse, improper disclosure, or destruction. This report evaluated whether security controls that effectively protect the confidentiality, integrity, and availability of the info. and systems that support FinCEN's mission have been implemented. Illus.

This book explores the Bank Secrecy Act (BSA), which is a legislative framework for combating money laundering. The Financial Crimes Enforcement Network (FinCEN) is responsible for the administration of the BSA regulatory structure, and has delegated examination responsibility to the federal banking regulators. This book describes how BSA compliance and enforcement responsibilities are distributed, how agencies other than FinCEN are implementing those responsibilities and the evaluation of their co-ordination efforts. This book also discusses security policies and controls for systems at three organisations to evaluate whether security controls effectively protect the confidentiality, integrity and availability of the information and systems that support FinCEN's mission. This book consists of public documents which have been located, gathered, combined, reformatted, and enhanced with a subject index, selectively edited and bound to provide easy access.

NASA relies extensively on information systems and networks to pioneer space exploration, scientific discovery, and aeronautics research. Many of these systems and networks are interconnected through the Internet, and may be targeted by evolving and growing cyber threats from a variety of sources. This report: (1) determines whether NASA has implemented appropriate controls to protect the confidentiality, integrity, and availability of the information and systems used to support NASA¿s mission directorates; and (2) assesses NASA¿s vulnerabilities in the context of prior incidents and corrective actions. The report examined network and system controls in place at 3 centers; and analyzed IS policies, plans, and reports.