IG: Dulles IT security needs more work

The Homeland Security Department has made progress on IT security at Dulles International Airport, but gaps remain, says a new report.

The Homeland Security Department needs to update its computer servers and upgrade physical protection for information technology systems at Dulles International Airport in Virginia, according to from DHS Inspector General Richard Skinner.

a new report

DHs' Transportation Security Administration, along with U.S. Customs and Border Protection, which both operate systems at Dulles, have undertaken corrective measures since the IG reported in January 2007 that critical IT systems there were at risk of being exploited and their missions disrupted.

However, both agencies need to do more work on physical security controls, including using locked cabinets, and on updating technical controls, including installing updated servers with the latest release of operating system software, according to the report posted on the Web June 9.

“The department has made significant progress in improving technical security for information technology assets at Dulles. However, further work is needed to comply with government policies and procedures,” the report states.

CBP officials agreed with the recommendations, and TSA officials agreed with most of the recommendations, according to comments included in the report.