Audit Reports

skip-to-content

Report on Audit of Security of the Federal Railroad Computer Systems Network

Project ID: 
FI-2006-029

Summary

The objective of this audit was to determine whether FRA’s network infrastructure is adequately secured to support both DOT and FRA missions. Specifically, we sought to determine whether FRA’s (1) network computers are properly configured and monitored to reduce the risk of attack, (2) Internet entry points are adequately protected to prevent cyber attack, and (3) remote network entry points used by employees and state inspectors are properly secured to prevent unauthorized access.