Friday, May 25, 2007

FBI Internal Network Security Still Poor

Via FCW.com -

The FBI could be exposing critical networks and information to attacks and insider threats, the Government Accountability Office says.

In a report published today, GAO found that the FBI uses inadequate information technology security controls on its critical internal networks. The combined security problems could lead to a breach of sensitive information or an insider attack, the report states.

The problems include:
  • Inconsistent configurations for network devices.
  • Inadequate control over identification and authentication to ensure that only authorized individuals can access networks.
  • Individuals’ ability to access information and functions outside what they need to perform their jobs.
  • Unencrypted sensitive data.
  • Patches that were not installed in a timely manner.
  • Employees not following physical security policies with their equipment.
---------------------------------------------------

These security issues are the exact issues faced by major corporations, so you think it would make sense to fix these common issues before attempting to put in place a next-generation
biometric system?

I guess not....

No comments:

Post a Comment