This book provides a general summary of the computer security weaknesses we identified in the unclassified information systems of the seven Commerce organizations we reviewed 3 as well as in the management of the department's information security program. Because of the sensitivity of specific weaknesses, we plan to issue a report designated for "Limited Official Use," which describes in more detail the logical access control weaknesses identified and offers specific recommendations for correcting them.