GAO: Most Agencies Fall Short on Cyber Requirements for Networked Devices

Most civilian agencies have not fully met federal requirements to identify and track networked Internet of Things (IoT) and operational technology (OT) devices, increasing potential cybersecurity risks, the Government Accountability Office (GAO) said in a Sept. Of the 22 civilian Chief Financial Officers (CFO) Act agencies GAO reviewed, 15 had established inventories of networked IoT and OT devices as of September 2026. Of those 15, 11 were maintaining the inventories and 10 had repo