The latest grades are out for the Federal Government when it comes to information security. According to Government Technology, Rep. Tom Davis, ranking member of the House Government Oversight and Reform Committee, gave the federal government an overall grade of C-minus when it comes to safekeeping information on government computer systems. After being mired with D's for the past three years, a C- shows some improvement, but still leaves a lot of room for growth.
While the Department of Justice and the Department of Housing and Urban Development showed the most improvement, with Justice jumping from a D to an A-minus, and HUD from D-plus to A-plus, there were also some significant declines. NASA fell from B-minus to D-minus and the Department of Education, which fell from C-minus to F.
As Rep. Mike Turner, ranking member of the Information Policy, Census and National Archives subcommittee, said in the Government Technology article, "It's troubling that some of the agencies with the most sensitive information continue to score poorly on this. The report identifies problems in federal agencies which include the Department of Defense, the Department of State, and the Nuclear Regulatory Commission."
However, on closer inspection, two of the biggest grade improvements came as a result of simply documenting the inventory of systems. You'd think this was a very elementary step to take for securing sensitive data.
As the article points out, "more improvement is needed in how systems are configured from a security standpoint and for training for employees with significant information security responsibilities."
Nobody in government IT should be satisfied with this improvement. Average compliance scores are one thing, but they most likely mean better than average vulnerability to exploits.
hello friend excellent post about FISMA Scores Improve...Barely thanks for sharing!!
Posted by: viagra online | February 05, 2010 at 04:38 PM
However, on closer inspection, two of the biggest grade improvements came as a result of simply documenting the inventory of systems. You'd think this was a very elementary step to take for securing sensitive data.
Posted by: flash games | March 21, 2009 at 04:14 AM
nice article. thank you.
Posted by: service-now expert | January 12, 2009 at 12:18 AM
Deciding on where you can download free PSP games can be a bit tricky, with all the options that are available to you.
http://pspgames247.com
Posted by: jim | September 04, 2008 at 08:45 AM