This evaluation of information security programs in the executive agencies of the U.S. federal government was requested by the Subcommittee on Government Information and Individual Rights, a part of the Congressional Committee on Government Operations. The report focuses on automated systems for personal, proprietary, and other sensitive information, particularly systems using telecommunication networks. Evaluation results indicate that a reasonable level of protection over information systems is not being provided. Accordingly, 10 recommendations for improvement are made. A glossary of terms precedes the five appendices which constitute the largest part of the report. These appendices comprise: (1) a review of the study's objectives, scope, and methodology; (2) a discussion of the automated information security problem; (3) an examination of four reasons why Office of Management and Budget (OMB) security guidelines do not provide sufficiently comprehensive policy and guidance to executive agencies; (4) an explanation of why central executive agencies are not effective in fulfilling their information security program responsibilities; and (5) a demonstration of the fact that senior agency management gives only limited support to automated information security programs. A diagram of telecommunication network vulnerabilities and a map illustrating the telecommunication networks of three civil federal agencies are provided. (ESR)