Our review found serious and pervasive problems that essentially rendered EPA's agency wide informations security program ineffective. Our tests of computer-based controls concluded that the computer operating systems and the agency wide computer network that support most of EPA's mission related and financial operations were riddles with security weaknesses.