Uncle Sam Earns C-minus Grade for PC Security

An anonymous reader writes "Twenty-four federal departments and agencies earned a collective grade of C-minus last year for their performance in meeting computer and network security requirements, according to marks handed out by a key congressional oversight committee today. The government-wide grade is up slightly from the 2005, when it earned an overall grade of D+. Eight agencies earned A grades, while as many warranted failing marks. '..the Department of Defense led a group of eight agencies that received failing marks for computer security. Also receiving that dubious distinction were the departments of Agriculture, Commerce, Education, Interior, State and Treasury, as well as the Nuclear Regulatory Commission. The Department of Homeland Security earned a D, although its overall performance improved since 2005. The Department of Veterans Affairs did not provide enough data to earn a grade. In 2005, it received an F.'"

Comments

But it was a strong improving "F"

[Danathar]

I heard on the radio that some gov spokesperson for DOD said

But it's a strong improving "F" ...LOL

I don't recall that ever working with mom "But Mom...it's an improved F over the last F I got"

heh

[AdebisiTheGamer]

"The Department of Homeland Security earned a D" Irony?

Government to use Full Disk Encryption on computer

[stonebeat.org]

This is why there is a 90-day project currently in progress to select a Full Disk Encryption suites for all government owned computers. A Request for Quotation (RFQ) has already gone out on the April 12, 2007. See http://www.herbb.hanscom.af.mil/download.asp?rfp=R 1450&FileName=NOTICE_OF_AVAILABILITY_OF_A_SOLICITA TION_2.doc

Hacking the grades

[Anonymous Coward]

Eight agencies earned A grades At least now we know which agencies are capable of hacking into the system to change their grades:

1) Central Intelligence Agency
2) National Security Agency
3) Office of Naval Intelligence
4) National Reconnaissance Office
5) Defense Intelligence Agency
6) National Geospatial-Intelligence Agency
7) Army Intelligence
8) Air Intelligence Agency

Re:If it were only so simple

[Anonymous Coward]

Naw, I work with the government too and most of the problems really are quite simple (or at least no more complicated than most). It's all the paperwork and bureaucracy that makes it complicated. Oh sure, we COULD just go to the store and buy the thing, but instead we'll fill out form 361-B in triplicate, ensuring one is in English, one is in French and the other is in some language only three people in the world can speak (meaning you'll have to get approval and fill out more paperwork to fly them in to finish that section the form) and then wait 4-6 months for the document and its approval to weave it's way through the maze of middle management. Oh well, at least it keeps me and many other workers employed.

I am not surprised

[Mike_ya]

I suspect this also includes government networks run by contractors.

A while back I use to be friends with someone who worked for one of these companies that do contract work for the government, for one of those agencies that require Secret or Top Secret clearance along with requiring routine polygraph tests.

I was told stories on occasion how IT jobs would come open and be filled not with individuals that had the technical qualifications but those that had the security clearance.

Heck, my friend who had a clearance and did clerical work was promoted to run the Help Desk and was giving a book to learn on the job. Then again a few years later to administer servers spread around the globe, with no formal training.

I was told the contracting companies would not hire individuals for the clearance jobs unless they already had the clearance. The clearance trumped any sort of job qualification.

If this has changed since 9/11 I don't know.

Re:If it were only so simple

[cyphercell]

For god's sake will someone quit giving that one asshole gold stars?