U.S. Agencies Earn D+ on Computer Security
MirrororriM writes "Seven of the 24 largest agencies received failing grades, including the departments of Energy and Homeland Security. The Homeland Security Department encompasses dozens of agencies and offices previously elsewhere in government but also includes the National Cyber Security Division, responsible for improving the security of the country's computer networks.
'Several agencies continue to receive failing grades, and that's unacceptable,' said Rep. Tom Davis, R-Va., the committee's chairman. 'We're also seeing some exceptional turnarounds.'"
What about the NSA? I'm sure that they take computer security a little more seriously. - Taj
Tell the truth and you won't have so much to remember.
I love the fact that we have this awesome new homeland security department... as well as fairly crappy homeland security.
"Things are more moderner than before- bigger, and yet smaller- it's computers-- San Dimas High School football RULES!"
This generation of old crusty politicians running the homeland security department is not going to be much, so an F grade wouldn't surprise me.
I would worry in the next generation when legit techies + Patriot Act starts invading all your privacy.
That's a knee-jerk reaction to stereotype faceless bureaucracies. To keep my soapbox short, I chalk up most of my negative experiences working within the gov't to the political side of human nature, and those inefficiencies are always going to be there. Until we fiure out how to breed perfect administrators.
each of those agencies will need to hire specialized people and consultantsA solution to this is being tried: NMCI (Navy Marine Corps Intranets) is one poor example of standardizing IT (and with it some security issues) across agencies. Unfortunately it's implementation is stifling to engineers, scientists and non-bureaucrats, and you really don't want to know how much the individual components are costing taxpayers. If NMCI is cutting edge for IT security, then security technology's got a long way to go to not throttle productivity! We'll take local IT mgmt over NMCI anytime.
Is it a rule, that there's an exception to every rule?