Calendar Year 2020

In Fiscal Year (FY) 2007, the Department of Energy (Department) consumed over
seven million gallons of petroleum-based fuel in the operation of a fleet of over 14,000
light, medium and heavy duty vehicles. These vehicles were either owned by the
Department or leased through the General Services Administration (GSA). Since April
2000, the Department has been subject to a number of executive and legislative
mandates to reduce the use of petroleum-based fuel. The Department's mission requires
that it assume a leadership role in energy conservation. Further, the practical impact of
recent gasoline price increases on the cost of operating a 14,000 vehicle fleet requires
aggressive conservation efforts.
Mr. Chairman and members of the Subcommittee, I am pleased to be here at your request to testify on matters relating to cyber security at the Department of Energy’s (Department) national defense laboratories. These laboratories, which are part of the National Nuclear Security Administration (NNSA), possess and process some of the Department’s most sensitive information; information which is critical to the Nation’s defense.
The Federal Energy Regulatory Commission depends on information technology to
support its strategic goals of promoting the development of a strong energy infrastructure,
supporting competitive markets, and preventing market manipulation. As with virtually
all Government and private sector organizations, the Commission is faced with numerous
and increasingly sophisticated attacks on its systems and data. To address this challenge
and the continuing threat to its systems, the Commission expects to spend about $5
million in Fiscal Year (FY) 2008 to protect its IT infrastructure and data from cyber
security related threats
The Department of Energy anticipated spending about $250 million in Fiscal Year (FY) 2008 to implement cyber security measures necessary to protect its information technology resources - systems and data critical to supporting its mission and business lines of energy security, nuclear security, scientific discovery and innovation,environmental responsibility, and management excellence. Security challenges and threats to the Department of Energy's information systems are continually evolving. Adversaries routinely attempt to compromise its information technology assets. As these attacks become increasingly sophisticated, it is critical that the Department's cyber security protective measures keep pace with the growing threat.

The Federal Information Security Management Act (FISMA) provides direction to agencies on the management and oversight of information security risks, including design and implementation of controls to protect Federal information and systems. As required by FISMA, the Office of Inspector General conducts an annual independent evaluation to determine whether the Department's unclassified cyber security program adequately protects its information systems and data. This memorandum and the attached report present the results of our evaluation for FY 2008.
Report on the Quality Assessment Review of the Investigative Outcomes of the Office of Inspector General for the U.S. Department of Energy

We have reviewed the system ofinternal safeguards and management procedures for the investigative function of the Office ofInspector General (OIG) for the U.S. Department ofEnergy (DOE) in effect for the one-year period ending May 14,2008. Our review was conducted in confonnity with the President's Council on Integrity and Efficiency (PCIE)/Executive Council on Integrity and Efficiency (ECIE) Quality Standards for Investigations, the Quality Assessment Review Guidelines established by the PCIE and ECIE, and the Attorney General's Guidelines for Offices of Inspector General with Statutory Law Enforcement Authority, as applicable.