The FBI could be exposing critical networks and information to attacks and insider threats, the Government Accountability Office says.
In a report published today, GAO found that the FBI uses inadequate information technology security controls on its critical internal networks. The combined security problems could lead to a breach of sensitive information or an insider attack, the report states.
The problems include:
- Inconsistent configurations for network devices.
- Inadequate control over identification and authentication to ensure that only authorized individuals can access networks.
- Individuals’ ability to access information and functions outside what they need to perform their jobs.
- Unencrypted sensitive data.
- Patches that were not installed in a timely manner.
- Employees not following physical security policies with their equipment.
These security issues are the exact issues faced by major corporations, so you think it would make sense to fix these common issues before attempting to put in place a next-generation biometric system?
I guess not....