Electronic Signature Prototype System

GAO responded to a request from the Army Corps of Engineers to extend its sanction of the Army's Electronic Signature Prototype System. GAO noted that: (1) the prototype system's internal controls are adequate and the electronic signatures generated by the system provide at least the same quality of evidence as handwritten signatures; (2) certain key controls for the system cannot be implemented at this time, but they will be incorporated into the system as the Army gains experience; (3) the Army will initially use cryptographic modules that do not meet all the stated requirements, but these modules will eventually be replaced with modules that meet the Army's requirements; (4) the National Institute of Standards and Technology (NIST) will review the electronic signature system's controls, and additional improvements will be made based on the NIST review; and (5) its sanction of the prototype system does not constitute approval of the Army's financial management system.