Fergie's Tech Blog

Defense IG: We're Our Worst Enemy

Bob Brewin writes on GovExec's Tech Insider:

The Defense Department inspector general released a report [.pdf] last week that shows despite releasing over the past year a grand total of 36 investigations and reports on Defense’s managerial shortcomings in information assurance weaknesses, Defense still has real problems with information security basics.

Investigations conducted between Aug. 1, 2006, and July 31, 2007, by the Defense IG, the Army Audit Agency, the Air Force Audit Agency and the Naval Audit Service repeatedly found problems with system access control, safeguarding of privacy information, poor security policy and procedures, training and education, according to the latest IG report, which is a bibliography of sorts of all the other info sec reports.

A total of 15 reports over the past year identified problems with system access control, the Defense IG said, including allowing unauthorized users to gain access to protected health information covered by the Privacy Act and “For Official Use Only” information.

posted by Fergie @ 9/17/2007 01:48:00 PM