ill step in to finish the task. Indeed, Congress will be looking carefully at the CVRA's effectiveness in changing the system in 2008, as it directed the General Accounting Office to "prepare and submit to the appropriate committees a report" on the effectiveness of the act at that time. °74 It would be unfortunate if initiativ

entified weaknesses in one of the six general control areas that we tested (the system development/change control process). FISCAM was developed by the General Accounting Office (GAO) and describes the computer-related controls that should be considered when assessing the integrity, confidentiality, and availability of compu