IG: DHS Intel folks need cyber education
The Department of Homeland Security's inspector general released a <a href="http://www.dhs.gov/xoig/assets/mgmtrpts/OIG_08-87_Aug08.pdf">report</a> Friday on the security program for DHS' Intelligence systems. Since it relates to weaknesses in top secret and sensitive systems, the report is predictably short in length and vague in its recommendations.
However, the one-page report also contains this nugget:
To be honest, there is no way to deduce from this report just how much or little progress DHS has made with regards to securing its most sensitive networks. If DHS was in fact completely incapable of protecting its top secret information, it's highly unlikely that the IG would jeopardize national security by advertising that fact in a publicly-available report. Likewise, if DHS has the most secure, high-level protections in place, they would still probably choose not to call attention to them.
The Department of Homeland Security's inspector general released a report Friday on the security program for DHS' Intelligence systems. Since it relates to weaknesses in top secret and sensitive systems, the report is predictably short in length and vague in its recommendations. As best I can tell, DHS seems to be doing a little better on the cybersecurity front:
During Fiscal Year 2008, the department has made significant progress in establishing an enterprise-wide information security management program for its intelligence systems. The department has compiled, updated, and maintained its enterprise-wide inventory of Top Secret/Sensitive Compartmented Information systems, as well as those systems that support an intelligence mission regardless of the classification.
Some management oversight and operational issues remain regarding the effectiveness of the program. In addition, the department still needs to establish and implement a formal information systems' security education, training, and awareness program for employees with significant responsibilities for the department's intelligence systems.
Perhaps the next IG report on a top secret/classified network should be limited to just a headline: "Everything is secure and if it wasn't we wouldn't tell you anyhow."
NEXT STORY: No Tweets in Iranian Election